RBAC与SIP体系结合的PETRI网模型及安全性分析  

Petri Net Model and the Security Analysis of RBAC Integrated SIP System

作　　者：覃嘉[1] 刘刚[1] 吕玉琴[1] 孙剑锋[1] 

机构地区：[1]北京邮电大学电子工程学院,北京100876

出　　处：《中国电子科学研究院学报》2008年第1期83-86,共4页Journal of China Academy of Electronics and Information Technology

摘　　要：在SIP体系中加入实现RBAC的PMI服务器,可以在增强SIP上开发增值业务灵活性的同时增强系统的安全性,但与对原有体系的改变可能会带来新的安全性问题,因此有必要对新系统进行分析以检验其安全性。用Petri网理论对系统进行形式化分析,发现了系统存在易被恶意用户进行重放攻击的安全隐患,并针对这个漏洞提出了相应的安全解决方案。To increase the flexibility of deploying value-added service beyond SIP, PMI server which ac- tualizes RBAC is brought into the SIP system. As the original SIP system has been changed, some new security problem may come out. Therefore, an analysis aimed at checking security is needed. By analyzing the system in Petri Net theory, a weak point is found that replay-attack could be used to invade the system, and a solution against the weak point is brought forward.

关 键 词：会话初始化协议 基于角色的访问控制 特权管理基础设施 PETRI网 

分 类 号：TN918.91[电子电信—通信与信息系统]