A SIP DoS flooding attack defense mechanism based on priority class queue
Xiaoyu Wan, Zhang Li, Zifu Fan · 2010
This paper focuses on the research of defense mechanism of DoS (denial of service) attacks in SIP network. An M/M/1/K queue analysis model based on queue theory is proposed to analyze the SIP DoS attack firstly. Then, a DoS attack defense mechanism is proposed in order to alleviate SIP server's influence by INVITE flooding attack. In our defense mechanism, the priority queue is introduced in SIP server's message processing. At last, simulation is taken to analyze the performance of the defense mechanism proposed in this paper. The simulation results proves that SIP DoS flooding attack defense mechanism not only prolongs the serving time of SIP server correctly, but also realizes the aim of differentiating legitimate SIP message from attack flow.