Open Access

ARTICLE

Rule-Based Anomaly Detection Model with Stateful Correlation Enhancing Mobile Network Security

Rafia Afzal, Raja Kumar Murugesan^*

School of Computer Science and Engineering, Taylor’s University, Subang Jaya, Selangor, 47500, Malaysia

* Corresponding Author: Raja Kumar Murugesan. Email:

Intelligent Automation & Soft Computing 2022, 31(3), 1825-1841. https://doi.org/10.32604/iasc.2022.020598

Received 30 May 2021; Accepted 26 July 2021; Issue published 09 October 2021

Abstract

The global Signalling System No. 7 (SS7) network protocol standard has been developed and regulated based only on trusted partner networks. The SS7 network protocol by design neither secures the communication channel nor verifies the entire network peers. The SS7 network protocol used in telecommunications has deficiencies that include verification of actual subscribers, precise location, subscriber’s belonging to a network, absence of illegitimate message filtering mechanism, and configuration deficiencies in home routing networks. Attackers can take advantage of these deficiencies and exploit them to impose threats such as subscriber or network data disclosure, intercept mobile traffic, perform account frauds, track subscriber location, and deny services. Existing methods are unable to identify suspicious hosts as they use a minimal number of network parameters. So, there is a vital need to overcome these deficiencies to detect the abnormal behaviour of users and hence mitigate security attacks in a mobile network. This research proposes a model for anomaly detection in mobile networks based on Rule-based filtering with stateful correlation. The performance of the proposed method is evaluated using synthetic datasets. Results show that the proposed anomaly detection model performs 0.37% better in terms of security attack detection rate, 24.25% better in terms of false alarm rate, and 31.45% better in terms of true positive rate when compared with the existing pattern recognition Artificial Neural Network (ANN) algorithm.

---

Keywords

---