基于优先级队列的SIP DoS洪泛攻击防御模型  

Priority queue-based SIP DoS flooding attack defense model

作　　者：樊自甫[1] 万晓榆[1] 

机构地区：[1]重庆邮电大学下一代网络应用技术研究所,重庆400065

出　　处：《计算机工程与设计》2009年第18期4217-4219,4223,共4页Computer Engineering and Design

基　　金：重庆市教委科学技术研究基金项目(KJ070512;KJ070515;KJ080512;KJ080523)

摘　　要：研究了NGN中的DoS攻击防御机制,利用排队论方法搭建出SIP DoS攻击M/M/1/K队列分析模型,设计出一种SIPDoS攻击防御模型。该模型将优先级队列引入到SIP服务器的消息处理中,从而减轻INVITE洪泛攻击对服务器的影响。最后通过NS2仿真工具对防御模型的性能进行了仿真分析,仿真结果表明,基于优先级队列的SIPDoS洪泛攻击模型能够有效地降低系统的响应时间。The research of defense mechanisms of DoS attacks in SIP protocol is researched mainly. A M/M/1/K queue analysis model based on queue theory is proposed to approximately analyze the SIP DoS attack firstly. Then, a DoS attack defense model is brought out, this model introduces the priority queue to message processing in SIP server, and alleviates SIP server influence due to INVITE flooding attack. At last, simulation is taken to analyze the performance of the defense model, simulation results proves that SIP DoS flooding attack defense model can reduce availably the response time of SIP system.

关 键 词：会话初始协议 DOS 洪泛 优先级队列 模型 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]