Journal of Beijing University of Posts and Telecommunications

  • EI核心期刊

JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM ›› 2014, Vol. 37 ›› Issue (6): 11-16.doi: 10.13190/j.jbupt.2014.06.003

• Papers • Previous Articles     Next Articles

Detection of Malformed SIP Messages Based on Map-Reduce Model

SHUANG Kai, XIA Qian-lin   

  1. State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China
  • Received:2014-03-07 Online:2014-12-28 Published:2014-10-17

Abstract:

This paper proposed a session initiation protocol(SIP) message inspection model combining the forward and backward rules inspection. With the capability of updating rules dynamically, this model can detect unknown type of malformed attack efficiently. Based on Map-Reduce model, the inspection procedure is divided into two phases: routine inspection and special inspection. In routine inspection, the basic format of SIP message is detected. In special inspection, the consistency with the grammar rules is verified in parallel after the segmentation of the SIP message. Experimental results show that the proposed inspection model can detect malformed features in the SIP message efficiently and accurately.

Key words: malformed session initiation protocol message, inspection model, Map-Reduce model

CLC Number: