融合网络中电信业务DoS攻击的分析与防御  

Analysis of DoS Attacks Aiming at Teleservices in Converged Networks and A Defense Measure

作　　者：孙健[1] 梁好[1] 许都[1] 

机构地区：[1]电子科技大学通信与信息工程学院,成都611731

出　　处：《电信科学》2010年第8期46-52,共7页Telecommunications Science

基　　金：国家"863"计划基金资助项目(No.2008AA011001;No.2008AA011002)

摘　　要：市场对业务的需求促进了现代电信网从传统语音网络向基于IP分组传输的下一代网络演进,IP网络缺乏QoS保证的缺点日益突出,以IP为承载的电信业务面临潜在DoS攻击的威胁,其攻击结果轻则降低用户接通率,严重时可完全阻断电信业务服务。本文首先剖析了融合网络环境下针对电信业务进行DoS攻击的原理及特点,比较了其与传统网络DoS攻击的不同,提出了有效的电信业务DoS攻击检测方法和防御DoS攻击模型。The increasingly demand of service gives rise to the modern telecommunication network＇s evolution from traditional voice network to the NGN based on IP packet transmission.The shortcoming that original IP network lacks QoS （quality of service） warranty becomes increasingly critical.The telecom IP services face a great threat of DoS, which will bring down call completion rate even cut off the services.This paper analyzes the principle and main characteristics of DoS attack to the telecom IP services under the environment of converged network, compares the differences between the new attack and traditional DoS attack, and proposes an effective detect method and defense DoS attack model.This model provides effective guarantee for the telecom IP service.

关 键 词：融合网络 电信业务 DOS攻击 信令消息 

分 类 号：TN913.24[电子电信—通信与信息系统]