一种IMS网络信令异常处理检测方法

A Signaling Abnormal Handling Detection Method in IP Multimedia Subsystem Network

针对IMS网络中被入侵或劫持的网络实体可能对信令消息做出恶意篡改等异常处理的问题,提出一种基于信令处理规则的IMS网络信令异常处理检测方法。该方法基于建立的信令处理规则库,模拟实体对信令消息的正常处理并生成一条预处理消息,通过判断预处理消息与经过实体处理后的信令消息是否匹配,检测IMS网络中是否存在信令异常处理。实验结果表明,该方法对信令异常处理的检测率达到了100%。

In order to solve the problem that entities in IP Multimedia Subsystem（IMS） network hijacked by attackers may make exception handling to signaling messages,this paper proposes a detection method for signaling exception handling in IMS based on signaling handling rules.It simulates the normal handling of the entity to signaling messages and generates a pre-processing message based on the database of signaling handling rules,and then matching detection is made between the pre-processing message and the message handled by the entity to detect signaling exception handling in IMS.Experimental results prove that the detection rate of exception handling in IMS achieves 100%.