Session initiation protocol denial of service attack throttling
In one implementation, the number of half open session initiation protocol (SIP) sessions per-destination (e.g., SIP device) or globally is limited by SIP application layer gateway (ALG) as a SIP DoS/DDoS countermeasure. Compared with traditional SIP DoS/DDoS countermeasures, the proposed solution is simple to implement and, thus, less likely to degrade SIP ALG performance. Moreover, this solution automatically adapts to DoS/DDoS attack arrival rate, while at the same time not degrading legal SIP traffic even if throttling is enforced for the SIP device.
Cisco Technology, Inc.
H H H H H
H04L H04L H04L H04L H04L
inventional inventional inventional inventional inventional
Yin Xin Yibin
Wang Li Zhang