基于状态模型的IMS网络SIP协议流程漏洞挖掘  

Vulnerability discovery method of SIP procedures in IMS network based on state model

作　　者：刘彩霞[1] 潘准洋 郭严赞[1] 

机构地区：[1]国家数字交换系统工程技术研究中心,河南郑州450002

出　　处：《计算机工程与设计》2014年第12期4160-4164,共5页Computer Engineering and Design

基　　金：2012年重大专项基金项目(2012ZX03006002-013)

摘　　要：为有效发现IMS网络中SIP协议流程的脆弱性,提出一种基于状态模型的SIP协议流程漏洞挖掘方法。在分析协议流程的基础上研究状态图的生成方法,设计基于状态图的漏洞挖掘模型,针对不同类型的脆弱性分别研究测试消息注入方法和异常响应监控方法。实验及分析结果表明,该方法覆盖率更高,能够进入协议执行流程内有效挖掘SIP协议流程漏洞。To discover and patch the SIP vulnerabilities in IMS network effectively,a vulnerability discovery method was proposed based on state model.First,a method was researched to build state diagram on the basis of protocol procedure analysis.Then a vulnerability discovery model was designed based on the state diagram.Finally,methods of injecting test messages and monitoring abnormal response for different vulnerabilities were discussed.The results of experiment and analysis show that this method can make a better test coverage and go deep into the performed procedure of protocols to discover SIP procedure vulnerabilities effectively.

关 键 词：IP多媒体子系统 会话初始协议 网络安全 漏洞挖掘 状态模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]