基于Fuzz测试的IMS网络SIP漏洞挖掘模型

为有效挖掘3G核心网IP多媒体子系统中SIP流程存在的安全漏洞,提出了一种基于Fuzz测试的SIP漏洞挖掘模型。基于Fuzz漏洞测试方法设计了一种SIP漏洞挖掘模型,设计的初始消息状态转移方法实现了其中的消息注入功能,使漏洞挖掘进入到SIP流程内部,实现了自适应监控功能,针对不同监控内容实施相应的监控方法。仿真结果验证了模型及其功能方法的有效性。

SIP vulnerability discovery model in IMS based on Fuzz testing

To effectively discover the vulnerability in the communication process of SIP protocol in the IP multimedia subsystem of 3G core network, this paper proposed a vulnerability discovery model. Firstly, this paper designed a SIP protocol vulnerability discovery model based on the Fuzz vulnerability testing. Then it designed states transfer method of initial message to achieve the message injection function of the model. Finally, it realized the seft-adaption monitoring function in the model, which could implement relevant monitor methods according to different monitor objects. Simulation experimental results show the effectiveness of the vulnerability discovery model and its function achievement.