A SYSTEM OF INVITE FLOODING ATTACK DETECTION AND DEFENSE USING SIP IN VOIP SERVICE AND THE MEHTOD THEREOF

摘要

PURPOSE: An invite flooding attack detection and protection system and a method thereof in a VoIP(Voice over Internet Protocol) service using an SIP(Session Initiation Protocol) are provided to distribute messages from an SIP proxy server to the other SIP proxy server in case of invite flooding attack, one of the DoS/DDoS(Denial of Server/Distributed DoS) of VoIP. CONSTITUTION: The other proxy server except for a proxy server inspects traffic due to increase of messages within a server. The other proxy server confirms IP and Terminal information of a corresponding message. The other proxy server distinguishes a normal message from Invite Message Attack. The other proxy server informs the distinguished result to the proxy server first sent the normal message and attack message information. The proxy server collecting the information operates a DDoS defense system against to the attack message. The proxy server collecting the information normally processes the normal message.