| SIP数据采集系统的设计与实现 |
| |
| 引用本文： | 杨雪华,侯辉超,杨姝,蒋宁.SIP数据采集系统的设计与实现[J].沈阳师范大学学报(自然科学版),2012,30(2):222-226. |
| |
| 作者姓名： | 杨雪华 侯辉超 杨姝 蒋宁 |
| |
| 作者单位： | 1. 沈阳师范大学教育技术学院,沈阳,110034
2. 中国科学院沈阳计算技术研究所,沈阳,110168 |
| |
| 基金项目： | 辽宁省教育科学“十二五”规划立项课题(JG11DB274) |
| |
| 摘 要： | SIP数据采集系统作为SIP入侵检测系统不可缺少的一部分,对其检测性能和准确率有着重要的影响。由于目前的数据采集工具不能直接用于处理应用层数据,很难满足SIP入侵检测系统的需求。分析了libpcap和pf_ring两种包捕获技术,描述了pf_ring的工作机制,设计了一种基于pf_ring技术的SIP数据采集系统结构。通过优化oSIP协议栈,采用在内核层和用户层结合的方法开发SIP数据过滤插件,实现了一种高效的SIP数据采集系统。通过比较实验证明本文提出的SIP数据采集系统在SIP数据采集方面具有一定的优越性,保证SIP入侵检测系统采集数据的高稳定性,为SIP入侵检测系统提供稳定可靠的数据来源。
|
| 关 键 词： | SIP pf_ring 入侵检测 网络包捕获技术 数据过滤 |
Design and implementation of SIP-based data collection system |
| |
| YANG Xue-hua
,
HOU Hui-chao
,
YANG Shu
,
JIANG Ning.Design and implementation of SIP-based data collection system[J].Journal of Shenyang Normal University: Nat Sci Ed,2012,30(2):222-226. |
| |
| Authors: | YANG Xue-hua HOU Hui-chao YANG Shu JIANG Ning |
| |
| Institution: | 1(1.College of Education Technology,Shenyang Normal University,Shenyang 110034,China;2.Shenyang Institute of Computing Technology,Chinese Academy of Science,Shenyang 110168,China) |
| |
| Abstract: | As an important part of an SIP intrusion detection system,SIP-based data collection system has significant impact on its detection performance and accuracy rate on this intrusion detection system.As current data collection tools do not directly deal with data in application layer,it is difficult to meet the requirement of the SIP intrusion detection system.This paper analyzes two kinds of packet capturing technology i.e.libpcap and pf_ring,describes pf_ring working mechanism,and proposes a SIP data collection system structure.Through optimizing the SIP protocol stack and developing the SIP data filtering plugins in the kernel layer and user layer,an efficient SIP-based data collection system is achieved.Experiments show that this SIP data collection system has some advantages in the SIP data collection,which ensures high reliability of data collected for the SIP intrusion detection system and provides a stable and reliable data source. |
| |
| Keywords: | session initiation protocol pf_ring intrusion detection network packet capture technology data filtering |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
