Rogue base station router detection with machine learning algorithms

摘要

This application is directed to a method for detecting a rogue device in a network. The method includes a step of surveying the network. The method also includes a step of collecting broadcast data from cellular towers in the network based on the survey. The method also includes a step of distilling the collected broadcast data into abstract syntax notation one (ASN.1)-encoded system information blocks (SIBs) associated with plural devices. The method further includes a step of featurizing the ASN.1-encoded SIBs. The method even further includes a step of running the featurized, ASN.1-encoded SIBs through an unsupervised machine learning algorithm. The algorithm is executed by a processor to analyze all cells in the survey for the rogue device. Yet even further, the method includes a step of determining, based on the run, anomalous cells exhibiting characteristics of the rogue device from all cells in the survey.