DETECTION OF SIP INVITE FLOODING ATTACKS BASED ON THE UPPER BOUND OF POSSIBLE NUMBER OF SIP MESSAGES

摘要

PURPOSE: maximum values determination method generates message and SIP INVITE flood attacks detection methods to accurately detect and provide SIP INVITE flood attacks using maximum value generation message. ;CONSTITUTION: based on weighted average message quantity and calculate determining maximum value (S20) message. Message is produced based on weighted average message number and maximum value. Critical value shows that a kind of attack state and threshold value carry out instruction alarm condition (S31, S32). In normal state, state is attacked, is detected with alarm state, according to comparison result. ;The 2011 of copyright KIPO submissions