Design And Implementation Of Security Module For Ims Safe Tester

IMS is an important concept presented by3GPP, an authoritative organization in the3G mobile communications industry. IMS can support IP multimedia services and is the key of next generation telecommunication network. Therefore, people must pay more attention to the network security of IMS.IMS safe tester can generate malformed SIP messages and carry out malformed SIP testing for the IMS network and find the vulnerability in the network. If the IMS safe tester is exploited by attackers, it may become a harmful tool to IMS. Therefore strengthening the internal security of the IMS safe tester has great significance in ensuring the IMS network security. This paper presents a security protection mechanism for IMS safe testers and a design for implementing a security module to protect the security of IMS safe testers.This paper starts by analyzing IMS network security and introducing functions of the IMS safe tester and then addresses the significance of the internal security of IMS safe testers in ensuring IMS network security. Then for the protection points of the IMS safe tester, the paper presents a complete security protection mechanism for protecting key technology and sensitive information of the tester, as well as maintaining manageability with authentication techniques, maintaining the verisimilitude of the test scene and the security of the network datagram with IPSec techniques, maintaining the confidentiality of the test results with AES encryption techniques, maintaining the traceability of tool usage with log recording and caching techniques. Based on the above security protection mechanism, this paper designed and implemented a security module for the IMS safe tester, which is able to simulate real users to set up sessions and test the network. It can also provide the query results of the testing and statistics of testing logs to the user of the tester. In this way, the security module enhances the internal security of the IMS safe tester. This paper also carried out unit testing for the security module and system integration testing with the other modules. According to the system test, the security module for IMS safe testers can guarantee the internal security of the IMS safe tester and simulate real users to carry out malformed SIP test and can discover vulnerabilities in the IMS network when cooperating with other modules which proves to have great significance in improving security of IMS safe testers as well as security for the whole IMS network.