基于排队论的SIP DoS攻击防御机制的研究

Research of SIP DoS attack defense mechanism based on queue theory

随着SIP协议的广泛应用,协议自身的安全问题逐渐显露出来,尤其以DoS攻击最为严重。研究了NGN中DoS攻击防御机制,给出了基于排队论的DoS攻击数学分析模型,接着设计出一种SIP DoS攻击防御方案,最后对防御机制的性能进行了仿真分析。

With the widespread use of session initial protocol （SIP）, the protocol＇s security problems have gradually emerged, in which DoS attacks is the most serious. Focusing on the research of defense mechanisms of DoS attacks in SIP protocol, this paper proposes a model based on queue theory to approximately analyze the DoS attack, and then presents a DoS attack defense method. Simulation was taken to analyze the performance of the defense mechanism.