基于状态转换的SIP容侵模型研究  

Research on the intrusion tolerance model of SIP based on state transfer

作　　者：张兆心[1] 张冰[1] 方滨兴[1] 胡萍[1] 李斌[1] 

机构地区：[1]哈尔滨工业大学计算机网络与信息安全技术研究中心,黑龙江哈尔滨150001

出　　处：《通信学报》2009年第12期1-11,共11页Journal on Communications

基　　金：国家高技术研究发展计划("863"计划)基金资助项目(2007AAA010503;2006AAA01Z451);哈尔滨工业大学(威海)研究基金资助项目(HIT(WH)200712)~~

摘　　要：通过对DoS攻击的原理、方式和特征及SIP网络面对的典型DoS攻击的深入研究,结合基于状态转换的容侵模型、Client Puzzle思想、SIP会话、SIP网络及其代理服务器的特点,提出了基于状态转换的SIP容侵模型,并设计相应的仿真实验环境,对该模型抵御DoS攻击的能力进行测试。测试结果表明该模型可以有效地处理针对计算能力、等待时间和洪水攻击类型的DoS攻击,增强了系统承载DoS攻击的能力,提高了SIP网络的可用性。Through deeply analyzing on the principle, mode, character of DoS and the DoS attack faced by SIP network, combining with the state transferring of intrusion tolerance, the idea of Client Puzzle, the character of SIP session, SIP network and SIP proxy server, put forward the SIP intrusion tolerence mode based on state transferring, and designed the testbed to test the ability of resisting DoS attack. The experiment result prove that this model can effectively resist the DoS attack including aiming at computing ability, waiting time, and flood, which improve the ability of SIP server on resisting DoS attack and the usablity of SIP network.

关 键 词：SIP DOS 状态转换 容侵模型 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]