首页>
外国专利>
Session Initiation Protocol (SIP) Firewall For IP Multimedia Subsystem (IMS) Core
Session Initiation Protocol (SIP) Firewall For IP Multimedia Subsystem (IMS) Core
展开▼
机译:IP多媒体子系统(IMS)核心的会话启动协议(SIP)防火墙
展开▼
页面导航
摘要
著录项
相似文献
摘要
A SIP firewall defends an IMS network against SIP registration-based DoS/DDoS attacks by issuing fake authentication challenges when suspiciously high registration traffic is present. The fake authentication challenges include a predictive nonce that is to be used in the challenge response, thus forcing users to be state-aware and to issue the SIP registration requests from valid IP address in order to successfully respond to the fake authentication challenges. Upon confirming an association between the challenge response and the fake authentication challenges, the firewall opens a registration window to a protected node of the core network. In such manner, the firewall opens a registration window to (unauthenticated) legitimate users while stopping DDoS mode of registrations (or at least making them extremely difficult and costly) without impacting or involving the protected node.
展开▼