Dissertation > Excellent graduate degree dissertation topics show

Research on DOS Attack and Defence of SIP

Author: XuZhenDuan
Tutor: LuSongNian
School: Shanghai Jiaotong University
Course: Communication and Information System
Keywords: DOS SIP flood attack reflection attack encryption authentication message process mechanism
CLC: TP393.08
Type: Master's thesis
Year: 2009
Downloads: 110
Quote: 6
Read: Download Dissertation

Abstract

Denial of Service (DOS) is a widely used network attack techniques in recent years, and Distributed Denial of Service develops base on DOS, and it is more dangerous. Because attackers could easily launch attack and hide themselves, DOS/DDOS have become the biggest threat of Internet.With the fast development of Internet, Next Generation Network should be based on unified IP network, so the core protocol of NGN——Session Initial Protocol(SIP) would became more and more popular, and security problem of SIP would come into focus gradually. As the biggest threat of Internet, DOS against SIP should be a key point of SIP security. At same time, the research on DOS attack and defence of SIP could be extending to DDOS area, because their basic principles are similar.First of all, we’ll introduce basic knowledge of SIP as the theory fundament of dissertation researches, then describe basic techniques of traditional DOS attack and defence. Based on basic principles of DOS attack, and combined with characteristic of SIP, we introduce the theory of application DOS attack against SIP. Refer to representative DOS attack techniques, such as SYN flood, reflection attack, we give four DOS attack techniques against SIP: INVITE flood, DNS query flood, REGISTER flood and reflection attack. With simulate attack experiments, take research and analysis on vulnerabilities of SIP that could be utilized by DOS attack.Afterwards, we take research DOS defence mechanism of SIP. Traditional DOS defence mechanism focus on three parts: source, medium network and attack target. But it is quite difficult to trace attack source in SIP network, because SIP is an application layer protocol, so it is impossible to deploy defence on attack source. This dissertation focus on take defence in SIP message transport mechanism and message process mechanism of SIP server. We could improved security level of SIP with encryption and authentication techniques, it should be useful defence methods against some DOS attack ,such as SIP INVITE flood, REGISTER flood. On another hand, we give three improvements on messages process mechanism of SIP server: increasing parallel message process numbers, using non-blocking server mode, using selective process mechanism for SIP messages. Then compare and analysis the efficiency of these defence mechanism while confront DOS attack introduced in former chapter.Finally, this dissertation take brief analysis on development of DOS attack and defence of SIP, give comments on future work about this area.

Related Dissertations

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile