INTRUSION PROTECTION DEVICE AND INTRUSION PROTECTION METHOD FOR POINT-TO-POINT TUNNELING PROTOCOL

摘要

An intrusion prevention system for point-to-point tunneling communication and a method thereof are provided to judge whether an abnormal traffic exists in tunneling packet data, without any modification for an abnormal traffic judgement policy for existing IP packet data, in point-to-point tunneling communication between mobile terminals. An intrusion prevention system for point-to-point tunneling communication comprises an IP packet creation part(252), an abnormal traffic detecting/processing part(253), and a tunneling packet transceiver part(251). The IP packet creation part restores tunneling packet data, transmitted between mobile terminals, into IP packet data. The abnormal traffic detecting/processing part judges whether an abnormal traffic exists in the IP packet data. It is confirmed that an abnormal traffic exists in the IP packet data, the tunneling packet transceiver part discards the tunneling packet data.