An Efficient Prevention Model Against SIP Flooding Attack
Xuehua Yang · Jisuanji gongcheng · 2013
By analyzing the principle,mode,characteristics of Denial of Service(DoS) attack aiming at Session Initiation Protocol(SIP) and flooding attack faced by SIP network,this paper proposes a prevention model combining a dynamic threshold adjustment with real-time dynamic prevention for SIP flooding attack.It can dynamically adjust the threshold and detect SIP flooding attack through chi-square traffic judging mode and cumulative statistics mode,and can dynamically prevent IP-based SIP flooding attacks with IP defense model.Experimental result shows that the model can effectively detect and prevent the SIP flooding attack,and reduce the probability of SIP/IMS server being attacked when SIP network is on the abnormity.