The design and realization of SIP DOS attack detection plugin based on balanced message number principle

With the use of S SIP (Session Initial Protocol) diffusely, the protocol´s security problems have gradually emerged, in which DoS (Denial of Service) attack is the most serious. This paper analyzes how to improve the detection mechanism´s performance of DoS attack in SIP. The principle based on balanced message number is proposed. At the same time, we design a plugin, which we name the SIP DoS attack detection plugin. A testing scenario to show the plugin functionality is constructed to validate the capability of SIP DoS detection plugin we proposed.