Methods and devices for defending a 3G wireless network against malicious attacks

• US 20070143769A1
• Filed: 12/19/2005
• Published: 06/21/2007
• Est. Priority Date: 12/19/2005
• Status: Active Grant

• Current Assignee: RPX Corporation
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Bu, Tian, Woo, Thomas, Norden, Samphel
• Granted Patent: US 8,965,334 B2
• Time in Patent Office: Days
• US Class Current: 719/313
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities
• CPC Class Codes: H04W 84/04 Large scale networks; Deep hierarchical networks

Abstract

Wireless state information collected or inferred from a 3G wireless network is used to detect and prevent malicious attacks against the network.

Claims

1. A method for detecting an attack against a 3G wireless network comprising:

obtaining wireless state information; and

comparing the obtained information to a profile to determine whether an attack is directed at an element in the network.

2. The method as in claim 1 further comprising preventing malicious traffic intended for a mobile device in the network from reaching the device when the comparison indicates an attack.

3. The method as in claim 1 wherein the state information is collected from one or more network elements in the network.

4. The method as in claim 1 wherein the state information is inferred from knowledge of the network.

5. A device for detecting an attack against a 3G wireless network operable to:

obtain wireless state information; and

compare the obtained information to a profile to determine whether an attack is directed at an element in the network.

6. The device as in claim 5 further operable to prevent malicious traffic intended for a mobile device in the network from reaching the device when the comparison indicates an attack.

7. The device as in claim 5 wherein the device is further operable to collect the state information from one or more elements in the network.

8. The device as in claim 5 wherein the device is further operable to infer state information from knowledge of the network.