北京邮电大学学报

  • EI核心期刊

北京邮电大学学报 ›› 2011, Vol. 34 ›› Issue (1): 130-134.doi: 10.13190/jbupt.201101.130.hun

• 研究报告 • 上一篇    下一篇

利用会话模式的垃圾电话检测

胡楠1,2,袁庆升3,魏更宇1,2,黄玮1,2,杨义先1,2   

  1. 1北京邮电大学 网络与信息攻防技术教育部重点实验室, 北京 100876; 2北京邮电大学 灾备技术国家工程实验室, 北京 100876; 3国家计算机网络应急技术处理协调中心, 北京 100029
  • 收稿日期:2010-03-24 修回日期:2010-08-17 出版日期:2011-02-28 发布日期:2011-02-28
  • 通讯作者: 胡楠 E-mail:hunan066366@gmail.com

A SPIT Detection Method Based on Conversation Pattern

  • Received:2010-03-24 Revised:2010-08-17 Online:2011-02-28 Published:2011-02-28

摘要:

为了解决网络电话(VoIP)业务面临的Internet垃圾电话(SPIT)问题,在针对SPIT检测方案的基础上提出利用人类会话模型对会话进行建模,在该模型的基础上将会话转化为表征会话模式的状态序列,再利用朴素贝叶斯分类器计算得到该会话模式为恶意会话模式可能性的数值度量. 该数值度量可用作检测呼叫机器人制造垃圾电话的依据,并在VoIP边界防护系统中得到了应用. 实验结果表明,该方法在较低误报率(2%左右)的情况下能保证较低的漏报率(小于10%),同时证明了会话模式可作为判断SPIT的特性之一.

关键词: Internet垃圾电话, 端点检测, 评分系统, 漏报率, 误报率

Abstract:

Based on the existing solution for spam over Internet telephony (SPIT) detection, a method using human conversational model to describe the call pattern of human telephone call is proposed. A conversational pattern state sequence is generated through the conversational model from a call. Via using Bayesian probability model, the possibility that the call is malicious is calculated. The possibility can be used to detect the spam phone calls generated by robot, and can be applied in our perimeter defense system. Experiments on the border defense system indicate that the false negative rate of detection is less 10% while the false positive rate remains low at about 2%. It demonstrates that conversation pattern can be used as a feature to detect behavior of SPIT as the other features.

Key words: spam over Internet telephony, endpoint detection, scoring system, false negative rate, false positive rate