Design And Implementation Of SIP Service Security Evaluation Platform In IMS

SIP is a signaling protocol for real-time communication in IP-based networks. It is chosen as the base protocol of IMS based on its ease usability, flexibility and extensibility. SIP is a text-based protocol transported by IP network, and quite vulnerable to simulating and tampering by attackers. As a result, IMS is also exposed to these threats.This thesis first focuses on the secure problems of SIP based business in IMS, and then designs the SIP Service Security Evaluation Platform. The detailed contents are as below:1. Deep researches on SIP secure problems, including registration hijack, server impersonating, session tearing down, message tempering and DoS attack.2. Based on these researches above, an extensible SIP security evaluation system was designed and realized. The features of the system are as below:(1) Integrated several typical SIP evaluation tools, aiming to do security evaluation on SIP based systems.(2) Adopted the B/S architecture and easy for deployment, maintenance and upgrades.(3) Easy to be extended. New evaluation tools can be easily added into the system without modifying other existing modules.