摘要
研究了NGN中的DoS攻击防御机制,利用排队论方法搭建出SIP DoS攻击M/M/1/K队列分析模型,设计出一种SIPDoS攻击防御模型。该模型将优先级队列引入到SIP服务器的消息处理中,从而减轻INVITE洪泛攻击对服务器的影响。最后通过NS2仿真工具对防御模型的性能进行了仿真分析,仿真结果表明,基于优先级队列的SIPDoS洪泛攻击模型能够有效地降低系统的响应时间。
The research of defense mechanisms of DoS attacks in SIP protocol is researched mainly. A M/M/1/K queue analysis model based on queue theory is proposed to approximately analyze the SIP DoS attack firstly. Then, a DoS attack defense model is brought out, this model introduces the priority queue to message processing in SIP server, and alleviates SIP server influence due to INVITE flooding attack. At last, simulation is taken to analyze the performance of the defense model, simulation results proves that SIP DoS flooding attack defense model can reduce availably the response time of SIP system.
出处
《计算机工程与设计》
CSCD
北大核心
2009年第18期4217-4219,4223,共4页
Computer Engineering and Design
基金
重庆市教委科学技术研究基金项目(KJ070512
KJ070515
KJ080512
KJ080523)
