Research On DoS Attack And Defense IMS Network

The IP Multimedia Subsystem (IMS) provides a common service platform forfuture multimedia services, and it is an important step towards full IP networkevolution. Consequently, it is of great significance to guarantee the safety of IMS.Meanwhile, DoS attack is mainly aimed at the vulnerabilities of the network protocolor the leaks existing in the systems, which are the most threatening among all theattacks, so, to ensure the safety of IMS, the study of DoS attack and its defense in IMSnetwork is extremely necessary. Some key techniques of DoS Attack and defense arestudied in this thesis. And the main work is arranged as follows:1. Research on IMSnetwork architecture, security mechanism and principle of SIP protocol is presented,and varieties of DoS attack in IMS network are analyzed.2. An IMS DoS attackdetection mechanism based on cumulative sum algorithm is proposed, which candetect the changes when IMS encounters DoS attack as it can detect abnormal datapoints at the beginning of relatively stable data sequence.3. A DoS attack detectionsystem for IMS network is implemented, which includes data packet interceptionmodule, event generation module, core module, user interaction module, detectionmodules of REGISTER DoS and INVITE DoS, all of which cooperate mutually tocomplete the DoS attack detection.