Analysis And Design Of A Snort-based Telecommunication Services Security System

Within the information age, information technology is increasingly affected people's lives. Information technology makes people's lives more convenient and people are increasingly dependent on information technology. However, the inherent openness and sharing of information technology not only promotes prosperity but also brings a lot of security issues. A variety of viruses, Trojans and hackers event happened that brought badly negative effect to people's lives and greatly restricted the development of information industry. As the main force in the information industry, telecommunications operators see the method to detect and process security issues very seriously. Some systems of network security protection had been established with consideration of character of telecom network and trasactions. However, these systems are not perfect and need further improvement and enhancement.Intrusion detection as an active means of defense which is an important component in whole network security protection system can effectively make up for firewall. With the gradually further research of intrusion detection, intrusion detection will be an effective way to solve the security problems in telecommunications services. Snort is a lightweight open-source intrusion detection system. Because of relatively less demanding on the hardware environment, being able to adapt to a variety of operating systems, excellent performance and fast updates, snort has been widely used around the world. Snort can monitor and analyse network packets and data packets to find out suspicious behavior.General Packet Radio Service is the most popular telecommunications technical standards. It inherits the advantages of GSM and greatly improve network data transfer rate. Because of the rise of GPRS, the mobile Internet gets a great development. But how to regulate and manage the mobile Internet to monitor the spread of harmful information and malicious user behavior becomes a new security problem. Meanwhile, with the rise of Internet data services, WAP technology, as the most important carrier of data services, will also face increasing security challenges.In this paper, a Snort-based telecommunications services security system is designed and implemented to manage users in mobile internet and maintain WAP services security. The system can be deployed in the GPRS core network to sniff and analyse user online behavior and the interaction data generated by WAP services order, including GTP protocol data packets and Radius protocol data packets. Through the analysis of GTP protocol data packets, the user's online behavior will be recorded which is beneficial for statistics and analysis of spam and malicious user. The order action from illegal user will be detected by analysing Radius protocol data packets and WAP order data packets which will futherly improve the security state of WAP services system.