Rule-based intrusion detection mechanism for IP multimedia subsystem

The rise of Internet not only drives the rapid development of network but also makes users' demand for Internet service higher. On the other hand, Global System for Mobile communication allows users access data and service through mobile network due to the advancement of access technology. It facilitates the convergence of Internet and mobile network. To merge the two networks, 3GPP standardized specifications for IP Multimedia Subsystems. It is an open standard architecture, bases on all-IP network and provides a variety of services. At present, there is no sufficient mechanism and strategy to assure the network security of IP Multimedia Subsystem. Thus there are many risks which include hacking, malicious usage, forgery, masquerade, denial of service and SQL Injection. Operators need an effective intrusion detection mechanism to guarantee whole the components operate correctly. In the paper, we purpose a rule-based intrusion detection mechanism for IP Multimedia Subsystem to prevent malicious behaviors, detect abnormal events real-time and ensure the entire core network can keep operating correctly.