计算机工程 ›› 2012, Vol. 38 ›› Issue (19): 129-132,150.doi: 10.3969/j.issn.1000-3428.2012.19.034

• 安全技术 • 上一篇    下一篇

一种IMS网络信令异常处理检测方法

谢晓龙,季新生,刘彩霞,刘树新   

  1. (国家数字交换系统工程技术研究中心,郑州 450002)
  • 收稿日期:2012-01-06 出版日期:2012-10-05 发布日期:2012-09-29
  • 作者简介:谢晓龙(1988-),男,硕士研究生,主研方向:网络安全,移动通信网;季新生,教授;刘彩霞,副教授;刘树新,硕士研究生
  • 基金项目:
    国家“863”计划基金资助项目(2011AA010604, 2008AA011003)

A Signaling Abnormal Handling Detection Method in IP Multimedia Subsystem Network

XIE Xiao-long, JI Xin-sheng, LIU Cai-xia, LIU Shu-xin   

  1. (National Digital Switching System Engineering and Technological R&D Center, Zhengzhou 450002, China)
  • Received:2012-01-06 Online:2012-10-05 Published:2012-09-29

摘要: 针对IMS网络中被入侵或劫持的网络实体可能对信令消息做出恶意篡改等异常处理的问题,提出一种基于信令处理规则的IMS网络信令异常处理检测方法。该方法基于建立的信令处理规则库,模拟实体对信令消息的正常处理并生成一条预处理消息,通过判断预处理消息与经过实体处理后的信令消息是否匹配,检测IMS网络中是否存在信令异常处理。实验结果表明,该方法对信令异常处理的检测率达到了100%。

关键词: IMS网络, 会话初始协议, 呼叫会话控制功能, 信令处理规则, 异常处理, 匹配检测

Abstract: In order to solve the problem that entities in IP Multimedia Subsystem(IMS) network hijacked by attackers may make exception handling to signaling messages, this paper proposes a detection method for signaling exception handling in IMS based on signaling handling rules. It simulates the normal handling of the entity to signaling messages and generates a pre-processing message based on the database of signaling handling rules, and then matching detection is made between the pre-processing message and the message handled by the entity to detect signaling exception handling in IMS. Experimental results prove that the detection rate of exception handling in IMS achieves 100%.

Key words: IP Multimedia Subsystem(IMS) network, Session Initialization Protocol(SIP), Call Session Control Function(CSCF), signaling handling rule, abnormal handling, matching detection

中图分类号: