公开(公告)号：US10986067B2

公开(公告)日：2021-04-20

申请号：US16323829

申请日：2017-07-03

Applicant: Nokia Solutions and Networks Oy

Inventor： Mehrnoosh Monshizadeh ,  Vikramajeet Khatri ,  Kimmo Kalervo Hatonen ,  Aapo Kalliola

IPC: H04L29/06 ,  H04W12/121 ,  H04W12/122 ,  H04W28/10

Abstract: A network apparatus of a communication system classifies traffic flows containing packets based on packet features. The network apparatus provides a copy of a packet contained in a traffic flow to a cluster node, and controls the cluster node to select at least one detector node based on the features of the packet and to forward said copy to the selected detector node to find out based on said copy whether the packet is malicious or not. In response to receiving from the detector node a flow indication on the traffic flow, the network apparatus controls a switch node to perform at least one flow control action on the traffic flow, the action including one or more of flow removal, flow modification and flow installation.

公开(公告)号：US10602396B2

公开(公告)日：2020-03-24

申请号：US15785915

申请日：2017-10-17

Applicant: Nokia Solutions and Networks Oy

Inventor： Aapo Kalliola ,  Ian Justin Oliver ,  Yoan Jean Claude Miche ,  Silke Holtmanns ,  Amaanat Ali ,  Pekka Kuure

IPC: H04W28/02 ,  H04L29/06 ,  H04W24/04 ,  H04L12/26 ,  H04W24/08 ,  H04W28/08 ,  H04W24/02 ,  H04W24/10 ,  H04W28/18

Abstract: This document discloses a solution for detecting and mitigating anomalies such as signalling storms in a radio access network of a wireless communication system. According to an aspect, there is disclosed a method including receiving, in a first local traffic analysis module, configuration parameters from a second local traffic analysis module or from a central traffic analysis module connected to a plurality of local traffic analysis modules; monitoring, by a first traffic analysis module by using the received configuration parameters, traffic in a radio access network of a wireless communication system; detecting, in the monitored traffic on the basis of the configuration parameters, an anomaly causing a control plane signalling load; and in response to said detecting, taking an action to mitigate the anomaly and reporting information on the anomaly to the central traffic analysis module.