定制加权公平队列调度下的SIP DoS攻击防御机制

摘要

SIP is attacked by DoS flooding easily because of it's open. The queue scheduling scheme can alleviate the SIP server's influence caused by flooding attack. By the analysis of SIP message character and existing queue scheduling scheme,this paper brings forward a SIP DoS flooding attack defense mechanism based on custom weighted fair queue scheming and simulates it's performance. The result of simulation proves the scheme is more effective than single queue and priority queue in defense of INVITE flooding attack.%SIP由于协议的开放性而容易受到DoS洪泛攻击,队列调度方案可以大大减轻洪泛攻击对SIP服务器的影响.通过对SIP消息特征和现有队列调度方案的分析,提出了一种基于定制加权公平队列调度的SIP DoS洪泛攻击防御机制,并对该机制进行了性能仿真.仿真结果显示该方案在防御INVITE洪泛攻击方面比单队列和优先级队列更为有效.