定制加权公平队列调度下的SIP DoS攻击防御机制  

SIP DoS attack defense mechanism based on custom weighted fair queue scheming

作　　者：樊自甫[1] 杨俊蓉[1] 万晓榆[1] 

机构地区：[1]重庆邮电大学电子商务与现代物流重点实验室,重庆400065

出　　处：《计算机工程与应用》2011年第8期62-65,共4页Computer Engineering and Applications

基　　金：重庆市教委科学技术研究项目(No.KJ080512;No.KJ090508;No.KJ080523)

摘　　要：SIP由于协议的开放性而容易受到DoS洪泛攻击,队列调度方案可以大大减轻洪泛攻击对SIP服务器的影响。通过对SIP消息特征和现有队列调度方案的分析,提出了一种基于定制加权公平队列调度的SIPDoS洪泛攻击防御机制,并对该机制进行了性能仿真。仿真结果显示该方案在防御INVITE洪泛攻击方面比单队列和优先级队列更为有效。SIP is attacked by DoS flooding easily because of it’s open.The queue scheduling scheme can alleviate the SIP server’s influence caused by flooding attack.By the analysis of SIP message character and existing queue scheduling scheme,this paper brings forward a SIP DoS flooding attack defense mechanism based on custom weighted fair queue scheming and simulates it’s performance.The result of simulation proves the scheme is more effective than single queue and priority queue in defense of INVITE flooding attack.

关 键 词：会话初始协议(SIP) 拒绝服务(DoS) 洪泛 定制加权公平队列 防御机制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]