基于D-S证据理论的SPIT检测方案

摘要

针对基于SIP协议的SPIT攻击(Spam over Internet Telephony,SPIT),提出一种基于统计的SPIT检测方法.该方法提取用户多个行为属性和采用D-S理论将多个属性进行融合,实现对多种攻击方式的检测.同时,对域进行分类有区别地考虑域发动攻击的可能性和用户的合法性,提高了检测的准确性.实验及分析表明上述方法具有较好的准确性,能够针对SPIT进行有效的检测.%To resolve the security problem of SIP, a detection method based on statistics is proposed. This method fuses multiple attributes of user's behavior into modules based on D-S evidence theory, and by such fusion it achieves the complementation of modules and the detection of multiple attacks. It also differentially considers the possibility of attack and legality of user by classifying domains,which improves accuracy of detection. Experiment and analysis results showed the high accuracy of the proposed method, by which the SPIT can be detected efficiently.