Korea Internet & Security Agency

Sung Moon Kwon

Do Won Kim

Young Kwon Park

Seong Min Park

Hyung Jin Cho

Jin Hyun Cho

Bo Min Choi

Provided is a method for detecting abnormal traffic. The method comprises collecting non-access stratum (NAS) traffic between a user equipment (UE) and a mobility management node, identifying a ciphering algorithm supported by the UE from a network access request message transmitted from the UE to the mobility management node, and identifying the UE as a first type of terminal at risk based on a determination that the UE only supports a null ciphering algorithm.

Method and apparatus for detecting null-ciphering channels

Provided is a method for rearranging traffic data performed by a computing device. The method comprises obtaining traffic data transmitted and received between a base station and a terminal, calculating a value of a Radio Resource Control (RRC) inactivity timer based on a RRC release message included in the traffic data, determining a size of a time window using the calculated value of the RRC inactivity timer and rearranging, for each time window having the determined size, the traffic data of a target terminal by an RRC connection request time.

Method and apparatus for rearranging traffic data

Growing community of inventors

Jeollanam-do, South Korea

Sung Moon Kwon