公开(公告)号：US20150026793A1

公开(公告)日：2015-01-22

申请号：US13944156

申请日：2013-07-17

Applicant: Cisco Technology, Inc.

Inventor： Xin Li ,  Yin Wang ,  Yibin Zhang

IPC: H04L29/06

CPC classification number: H04L63/0281 ,  H04L63/1458 ,  H04L65/1006 ,  H04L65/105 ,  H04L65/1079

Abstract: In one implementation, the number of half open session initiation protocol (SIP) sessions per-destination (e.g., SIP device) or globally is limited by SIP application layer gateway (ALG) as a SIP DoS/DDoS countermeasure. Compared with traditional SIP DoS/DDoS countermeasures, the proposed solution is simple to implement and, thus, less likely to degrade SIP ALG performance. Moreover, this solution automatically adapts to DoS/DDoS attack arrival rate, while at the same time not degrading legal SIP traffic even if throttling is enforced for the SIP device.

Abstract translation: 在一个实现中，每个目的地（例如，SIP设备）或全局的半开放会话发起协议（SIP）会话的数量被SIP应用层网关（ALG）限制为SIP DoS / DDoS对策。 与传统的SIP DoS / DDoS对策相比，提出的解决方案实施简单，因此不太可能降低SIP ALG性能。 此外，该解决方案自动适应DoS / DDoS攻击到达速率，同时也不会降低合法的SIP流量，即使对SIP设备执行限制。

公开(公告)号：US09736118B2

公开(公告)日：2017-08-15

申请号：US13944156

申请日：2013-07-17

Applicant: Cisco Technology, Inc.

Inventor： Xin Li ,  Yin Wang ,  Yibin Zhang

IPC: G06F9/00 ,  H04L29/06 ,  G06F17/00

CPC classification number: H04L63/0281 ,  H04L63/1458 ,  H04L65/1006 ,  H04L65/105 ,  H04L65/1079

Abstract: In one implementation, the number of half open session initiation protocol (SIP) sessions per-destination (e.g., SIP device) or globally is limited by SIP application layer gateway (ALG) as a SIP DoS/DDoS countermeasure. Compared with traditional SIP DoS/DDoS countermeasures, the proposed solution is simple to implement and, thus, less likely to degrade SIP ALG performance. Moreover, this solution automatically adapts to DoS/DDoS attack arrival rate, while at the same time not degrading legal SIP traffic even if throttling is enforced for the SIP device.