SIPp-DD: SIP DDoS Flood-Attack Simulation Tool
SIPp-DD: SIP DDoS Flood-Attack Simulation Tool
复制标题
SIPp-DD：SIP DDoS 洪水攻击模拟工具
DOI：
10.1109/icccn.2011.6005946
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
L. Kencl
中科院分区：
文献类型：
--
作者：
Jan Stanek;L. Kencl
随着IP语音通信和SIP协议的日益普及，包括针对信令的拒绝服务攻击在内的移动网络正成为日益严重的威胁。我们提出了SIPP-DD，这是一个用于生成真实的SIP DDoS洪水攻击的工具。SIPP-DD修改了流行的SIPP呼叫生成器，并提供了欺骗所生成消息的源IP地址和端口的选项。为了灵活起见，可以使用文本文件输入任意组源IP地址和端口。为了创建真实的攻击，我们分析了一些公开可用的DDoS洪流攻击，得出了典型的地址和数据包种群分布，并将其用于攻击生成。我们将生成器的输出与实际分析的DDoS洪流进行了比较，并通过在真实的SIP服务器测试床上执行DDoS攻击来演示工具的适用性。
With the growing popularity of Voice-over-IP communication and of the SIP protocol, mobile networks including, denial-of-service attacks against the signaling are an increasingly menacing threat. We present SIPp-DD, a tool for generating real-like SIP DDoS flood attacks. SIPp-DD modifies the popular SIPp call generator and offers the option to spoof source IP addresses and ports of the generated messages. For flexibility, any set of source IP addresses and ports can be input, using a text file. To create real-like attacks, we analyze some of the publicly available DDoS flood attacks, derive typical distributions of address and packet populations and employ those in attack generation. We compare the generator outputs with the real analyzed DDoS floods and demonstrate the tool applicability by performing a DDoS attack within a real SIP-server testbed.