A System for Detecting a Port Scanner in 3G WCDMA Mobile Networks
K. Sekwon, O. Joohyung, I. Chaetae, K. Inho · 2016
Currently, there has been a 3G mobile networks data traffic explosion due to the large increase in the number of smartphone users. Unlike the traditional wired infrastructure, 3G mobile networks have limited wireless resources and signaling procedures for complex wireless resource management. However, mobile network security for various abnormal and malicious traffic technologies was not ready. So malicious or potentially malicious traffic originating from mobile malware infected smart devices can cause serious problems to the 3G mobile networks, such as DoS and scanning attacks in wired networks. In this paper, we describe the port scanning attacks and propose a port scanning detection system based on the Threshold Random Walk (TRW) algorithm in 3G mobile networks. In 3G WCDMA mobile networks, the proposed system detects a variety of port scanning attack in real time. The results of applying the 3G WCDMA mobile network show that the proposed systems are practical and effective.