ZENG Shui-fei1, HE Guang-yu2, WEN Ying-you2, et al. Research on DoS detection and reaction of SIP application[J]. 2010, 31(5): 108-112.DOI:
SIP应用的DoS检测与响应研究
摘要
针对全IP融合网络环境下基于SIP协议的拒绝服务攻击(DoS
denial of service)隐患
提出了一种新颖的检测与响应方法
该方法针对SIPDoS攻击的特点来增强检测的准确性。然后利用改进的SIP事务有限状态机进行检测
并基于谜题挑战机制采取响应措施。仿真实验与分析证明了该方法的功能与性能满足SIPDoS防范的需求。
Abstract
To resolve the SIP DoS hidden trouble in the ALL-IP fusion network
a novel detection and reaction method was proposed.First
the characteristic of SIP DoS behavior was analyzed deeply to enhance the pertinency of detection.Afterwards
the method used the improved SIP transaction-finite automation(IST-FA) to detect the DoS attacks.Finally
the method took the reaction based on the puzzle challenge mechanism.Simulation and analysis show that the efficiency and performance of the method can satisfy the requirement of SIP DoS prevention.