Distributed Intrusion Prevention System for SIP DDoS Attack
This paper studies the theory of SIP DDoS attack,detection algorithms and the characters of SIP protocol itself.Combined w ith the distributed intrusion prevention systems in general netw ork,a highly efficient distributed prevention system is proposed and the load interaction process and firew all module for the system are designed.The system can detect SIP DDoS attack w ith detecting algorithms w hile defending attack at the same time.According to the SIP load balance algorithms and the requirements of detection algorithms,a tw o level load balance strategy for the system is designed.The first level load balance module distributes messages according to the head fields of the messages to keep the integrity of dialog and meet the requirements of detecting algorithms.The second level lord balance module distributes messages according to the load of defending and detecting nodes to keep the load balance of these nodes.The simulation results show that the tw o level load balance strategy of the system can meet the requirements of detection algorithms and make a good performance of load-balancing features.