融合网络中电信业务DoS攻击的分析与防御

Analysis of DoS Attacks Aiming at Teleservices in Converged Networks and A Defense Measure

市场对业务的需求促进了现代电信网从传统语音网络向基于IP分组传输的下一代网络演进,IP网络缺乏QoS保证的缺点日益突出,以IP为承载的电信业务面临潜在DoS攻击的威胁,其攻击结果轻则降低用户接通率,严重时可完全阻断电信业务服务。本文首先剖析了融合网络环境下针对电信业务进行DoS攻击的原理及特点,比较了其与传统网络DoS攻击的不同,提出了有效的电信业务DoS攻击检测方法和防御DoS攻击模型。

The increasingly demand of service gives rise to the modern telecommunication network＇s evolution from traditional voice network to the NGN based on IP packet transmission.The shortcoming that original IP network lacks QoS （quality of service） warranty becomes increasingly critical.The telecom IP services face a great threat of DoS, which will bring down call completion rate even cut off the services.This paper analyzes the principle and main characteristics of DoS attack to the telecom IP services under the environment of converged network, compares the differences between the new attack and traditional DoS attack, and proposes an effective detect method and defense DoS attack model.This model provides effective guarantee for the telecom IP service.