| IMS网络中的SIP洪泛攻击检测 |
| |
| 引用本文： | 王尚广,孙其博,杨放春.IMS网络中的SIP洪泛攻击检测[J].软件学报,2011,22(4):761-772. |
| |
| 作者姓名： | 王尚广 孙其博 杨放春 |
| |
| 作者单位： | 北京邮电大学,网络与交换技术国家重点实验室,北京,100876 |
| |
| 基金项目： | 国家自然科学基金(60672121); 国家自然科学基金创新研究群体科学基金(60821001); 国家重点基础研究发展计划(973)(2009CB320406); 国家高技术研究发展计划(863)(2006AA01Z448); 国家教育部科学技术研究重点项目(108013); 国家242 信息安全计划项目(2007A14) |
| |
| 摘 要： | 为了检测针对3G核心网中IP多媒体子系统的SIP(session initiation protocol)洪泛攻击,提出了一种双抽样多点检测方法.该方法在使用计数式布鲁姆过滤器统计检测特征信息的基础上,将检测空间划分为5个范围,即正常范围、关注范围、检测范围、精检测范围和攻击范围,然后对落在不同范围内的统计信息给予相应...
|
| 关 键 词： | IP多媒体子系统 会话初始协议 计数式布鲁姆过滤器 双抽样与变抽样间隔 |
| 收稿时间： | 5/5/2009 12:00:00 AM |
| 修稿时间： | 1/5/2010 12:00:00 AM |
Detecting SIP Flooding Attacks Against IMS Network |
| |
| WANG Shang-Guang,SUN Qi-Bo and YANG Fang-Chun.Detecting SIP Flooding Attacks Against IMS Network[J].Journal of Software,2011,22(4):761-772. |
| |
| Authors: | WANG Shang-Guang SUN Qi-Bo and YANG Fang-Chun |
| |
| Affiliation: | State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China;State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China;State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China |
| |
| Abstract: | To detect the SIP (session initiation protocol) flooding attack against the IP Multimedia Subsystem of 3G core network, this study proposes a double sampling and a variable sampling interval detection approach. Based on the Counting Bloom Filter for the statistical detection of characteristic information, this approach divides the detection space into five areas, namely, the normal range, interesting range, detection range, precise detection range, and attack range, and detects the statistic data falling in each of the different ranges. Simulation experimental results show that this approach has a good detection performance. |
| |
| Keywords: | IP multimedia subsystem session initiation protocol counting Bloom filter double sampling and variable sampling interval |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《软件学报》浏览原始摘要信息 |
|
点击此处可从《软件学报》下载全文 |
|
