检测SIP系统的DoS攻击

1st IEEE Workshop on VoIP Management and Security, 2006. Pub Date : 2006-04-03 DOI:10.1109/VOIPMS.2006.1638123

Eric Y. Chen

{"title":"检测SIP系统的DoS攻击","authors":"Eric Y. Chen","doi":"10.1109/VOIPMS.2006.1638123","DOIUrl":null,"url":null,"abstract":"As VoIP technology becomes more widely deployed due to its economical advantage over traditional PSTN services, VoIP servers and clients will become attractive targets of denial of service (DoS) attacks. This paper proposes a method to detect DoS attacks that involve flooding SIP entities with illegitimate SIP messages. We modify the original finite-state machines for SIP transactions in such a way that transaction anomalies can be detected in a stateful manner. We also propose to use four threshold parameters to confirm an attack.","PeriodicalId":374092,"journal":{"name":"1st IEEE Workshop on VoIP Management and Security, 2006.","volume":"21 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2006-04-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"114","resultStr":"{\"title\":\"Detecting DoS attacks on SIP systems\",\"authors\":\"Eric Y. Chen\",\"doi\":\"10.1109/VOIPMS.2006.1638123\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"As VoIP technology becomes more widely deployed due to its economical advantage over traditional PSTN services, VoIP servers and clients will become attractive targets of denial of service (DoS) attacks. This paper proposes a method to detect DoS attacks that involve flooding SIP entities with illegitimate SIP messages. We modify the original finite-state machines for SIP transactions in such a way that transaction anomalies can be detected in a stateful manner. We also propose to use four threshold parameters to confirm an attack.\",\"PeriodicalId\":374092,\"journal\":{\"name\":\"1st IEEE Workshop on VoIP Management and Security, 2006.\",\"volume\":\"21 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2006-04-03\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"114\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"1st IEEE Workshop on VoIP Management and Security, 2006.\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/VOIPMS.2006.1638123\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"1st IEEE Workshop on VoIP Management and Security, 2006.","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/VOIPMS.2006.1638123","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 114

摘要

随着VoIP技术相对于传统的PSTN业务具有经济优势，其应用越来越广泛，VoIP服务器和客户端将成为拒绝服务攻击的目标。本文提出了一种检测含有大量非法SIP消息的SIP实体的DoS攻击的方法。我们修改了SIP事务的原始有限状态机，以便能够以有状态的方式检测事务异常。我们还建议使用四个阈值参数来确认攻击。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

Detecting DoS attacks on SIP systems

As VoIP technology becomes more widely deployed due to its economical advantage over traditional PSTN services, VoIP servers and clients will become attractive targets of denial of service (DoS) attacks. This paper proposes a method to detect DoS attacks that involve flooding SIP entities with illegitimate SIP messages. We modify the original finite-state machines for SIP transactions in such a way that transaction anomalies can be detected in a stateful manner. We also propose to use four threshold parameters to confirm an attack.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

1st IEEE Workshop on VoIP Management and Security, 2006.

自引率

0.00%

发文量