SIP应用的DoS检测与响应研究  

Research on DoS detection and reaction of SIP application

作　　者：曾谁飞[1] 何光宇[2] 闻英友[2] 王仁波[1] 

机构地区：[1]东华理工大学信息与电子工程学院,江西抚州344000 [2]东北大学信息科学与工程学院,辽宁沈阳110004

出　　处：《通信学报》2010年第5期108-112,共5页Journal on Communications

摘　　要：针对全IP融合网络环境下基于SIP协议的拒绝服务攻击(DoS,denial of service)隐患,提出了一种新颖的检测与响应方法,该方法针对SIPDoS攻击的特点来增强检测的准确性。然后利用改进的SIP事务有限状态机进行检测,并基于谜题挑战机制采取响应措施。仿真实验与分析证明了该方法的功能与性能满足SIPDoS防范的需求。To resolve the SIP DoS hidden trouble in the ALL-IP fusion network,a novel detection and reaction method was proposed.First,the characteristic of SIP DoS behavior was analyzed deeply to enhance the pertinency of detection.Afterwards,the method used the improved SIP transaction-finite automation（IST-FA） to detect the DoS attacks.Finally,the method took the reaction based on the puzzle challenge mechanism.Simulation and analysis show that the efficiency and performance of the method can satisfy the requirement of SIP DoS prevention.

关 键 词：会话初始协议 拒绝服务 有限状态机 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术]