| CPC H04L 63/1425 (2013.01) [G06F 9/45558 (2013.01); H04L 63/1416 (2013.01); H04L 67/142 (2013.01); G06F 2009/45595 (2013.01)] | 18 Claims | 

| 
               1. A packet collection method for virtualization core network session management performed by a packet collection apparatus for virtualization core network session management, the packet collection method comprising: 
            an operation (A) of transmitting a control-related packet to be transmitted via a session management unit of an attack detection device through software-defined networking (SDN) when transmission of the control-related packet occurs in a mobile communication virtual machine; and 
                an operation (B) of the session management unit extracting and collecting session information from the control-related packet received through the SDN, 
                wherein the mobile communication virtual machine comprises a 3G virtual machine, a 4G virtual machine, and a 5G virtual machine, and 
                wherein the operation (A) comprises: 
              an operation (A-1) of transmitting a control-related packet to be transmitted between a serving GPRS (general packet radio service) support node (SGSN) and a gateway GPRS support node (GGSN) of the 3G virtual machine via the session management unit of the attack detection device through the SDN; 
                  an operation (A-2) of transmitting a control-related packet to be transmitted between a serving gateway (S-GW) and a packet data network gateway (P-GW) of the 4G virtual machine via the session management unit of the attack detection device through the SDN; and 
                  an operation (A-3) of transmitting a control-related packet to be transmitted between an access and mobility management function (AMF) and a session management function (SMF) of the 5G virtual machine via the session management unit of the attack detection device through the SDN. 
                 |