IMS网络中SP洪泛检测方法的研究与实现-计算机科学与技术专业毕业论文.docx

北京邮电大学硕士学位论文 北京邮电大学硕士学位论文 ABSTR ACT 唧I己ESEARCH AND REALIZATION OF SIP FLOODING DETECTION NmTHOD IN IMS NETWORK ABSTRACT IMS iS one main part of core network in 3G system．It makes all end-to—end conversation based on session initial protocol(SIP)，and gets the QoS it requires．IMS not only solves the problem that can not be solved by soffswitch technology,but alSO becomes the foundation to converge mobile and fixed line network．As a platform to provide multimedia data service． IMS is an important step to make Communications Network become an IP network． In common Communications Network，security problems are not SO much because the network iS not completely opened．But IMS will bring threats to today’S Communications network．As one of the main threats in internet， Flooding aRack will be a significant threat in IMS network． State Key Laboratory of Networking and Switching Technology of Beijing University of PostsTelecommunications(BUTT)is responsible for the State 863 Proj ect“Safety Evaluation Technology and Tools In Next Generation Telecommunication Network．This Paper is based on one part named‘‘Threat Analyse’in this project． The Papelfirst introduces the research background，the architecture and security of IMS，and the intrusion detection technology．The paper then concludes and classifies the possible attack in IMS，and analyzes the principle and harm of every attack．Then a method iS presented，which detects SIP message flooding attack in IMS．The method iS called Cumulative Sum Algorithm and iS commonly used in Internet to detect TCP SYN flooding attack．By doing some modification to this algorithom the method Call be correctly used in detection of SIP message flooding ¨l 北京邮电大学硕十学位论文 北京邮电大学硕十学位论文 ABSTRACT attack in IMS．At last the paper introduced the design of threat detection