%0 Journal Article
%T Detecting SIP Flooding Attacks Against IMS Network<br>IMS 网络中的SIP 洪泛攻击检测
%A WANG Shang-Guang
%A SUN Qi-Bo
%A YANG Fang-Chun
%A <br>王尚广
%A 孙其博
%A 杨放春
%J 软件学报
%D 2011
%I 
%X To detect the SIP (session initiation protocol) flooding attack against the IP Multimedia Subsystem of 3G core network, this study proposes a double sampling and a variable sampling interval detection approach. Based on the Counting Bloom Filter for the statistical detection of characteristic information, this approach divides the detection space into five areas, namely, the normal range, interesting range, detection range, precise detection range, and attack range, and detects the statistic data falling in each of the different ranges. Simulation experimental results show that this approach has a good detection performance.
%K IP multimedia subsystem
%K session initiation protocol
%K counting Bloom filter
%K double sampling and variable sampling interval<br>IP
%K 多媒体子系统
%K 会话初始协议
%K 计数式布鲁姆过滤器
%K 双抽样与变抽样间隔
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=7735F413D429542E610B3D6AC0D5EC59&aid=92AB038592B323ACFE02E33F2C866040&yid=9377ED8094509821&vid=BC12EA701C895178&iid=E158A972A605785F&sid=A67EE05E56DA7F45&eid=FAC9AF09A23B46DD&journal_id=1000-9825&journal_name=软件学报&referenced_num=0&reference_num=27