一种新的SIP综合安全支持框架

Securing the SIP with a New Synthetical Framework

摘要:

伴随着SIP的安全问题越来越受到人们的重视,许多安全模型和策略方案也相继被提出,但是由于SIP协议本质上是一种应用层信令控制协议,这些被提出的模型和策略方案要么无法克服其本身的脆弱性,要么降低了SIP协议的灵活性。文章在仔细研究SIP基本工作原理和遭受攻击的脆弱性的根源的基础上,提出了一种立体的综合的安全框架,使得SIP安全的实现和维护变得更加结构化,既能保证SIP应用的安全性,又不失其灵活性和有效性。

Abstract:

In the past few years, some models and schemes were setup to deal with the problem about the security of the SIP. While because the SIP is a signaling control protocol based on the application layer of OSI, such models and schemes either cannot win through their natural frangibility or reduce the flexibility of the SIP. To handle the problem more effectively, the basic principle and the rooting cause of attack problem of the SIP were reviewed and analyzed. Then a new synthetical framework was proposed to make the security realization and maintenance of SIP more structural, which not only reinforced the security of the SIP, but also preserved the flexibility of the SIP.