Satellite Communication Network Anomaly Detection Research Based on Signaling Sequence

The traditional anomaly detection uses rules to collect all of the anomalous models, then detects new-coming data. This method is difficult to detect all kinds of new anomaly, and the data of anomaly is difficult to gain, so we can only obtain the information of normal behaviors. This paper analyzes the different intrusion behaviors and anomaly condition in satellite communication network, we construct the normal user’s profile by normal communication signaling sequences. The anomaly detection model based on signaling sequences can obtain upper detection precision only by trifle samples. Supported by the satellite communication emulator, this model can get higher detection rate and lower false positive rate.