针对SIP协议栈实现漏洞的挖掘方法研究与实现

发布时间：2018-08-30 16:19

【摘要】：会话初始化协议(Session Initiation Protocol,简称SIP)具备用户注册、呼叫过程控制、代理机制和重定向机制等基本功能。但是,IETF (Internet Engineering Task Force,Internet工程任务组)在设计SIP协议的时候,致力于SIP协议的易用性,并没过多考虑协议的安全问题,所以SIP协议的安全性问题自其诞生之日起便存在。SIP协议的安全问题已成为下一代网络和信息安全受到威胁的关键因素。SIP协议的安全问题依赖于SIP协议栈的健壮性。及时地挖掘出SIP协议栈中的实现漏洞并加以解决可以保证SIP协议栈的健壮性,从而解决SIP协议的安全问题。在相关业界中,大多采用模糊测试的方法对SIP协议栈进行漏洞挖掘。模糊测试方法能够挖掘出部分SIP协议栈漏洞,但是,只采用模糊测试方法,测试集合大,无效测试用例多,漏洞挖掘效率低。为了提高模糊测试的漏洞挖掘效率,本文在模糊测试中引入了符号执行,提出了针对SIP协议栈实现漏洞的挖掘方法。针对SIP协议栈实现漏洞的挖掘方法首先通过危险函数来寻找漏洞的触发点,接着采用深度与宽度混合遍历算法计算危险函数触发的路径;随后使用符号执行技术确定漏洞触发的条件,根据条件生成畸形SIP信令集合;最后通过测试效果评估模块对畸形SIP信令集合进行筛选,从而得到测试效果更加明显的畸形SIP信令集合。实验结果表明,本文所使用的方法不仅增强了测试数据的针对性,而且还提高了针对SIP协议栈实现漏洞挖掘的效率和准确性。
[Abstract]:Session initiation Protocol (Session Initiation Protocol,) has basic functions such as user registration, call process control, proxy mechanism and redirection mechanism. However, the IETF (Internet Engineering Task Force,Internet Engineering Task Force (IETF) devotes itself to the ease of use of the SIP protocol when designing the SIP protocol, and does not think too much about the security of the protocol. Therefore, the security problem of SIP protocol has been the key factor for the next generation network and information security to be threatened since its birth. The security problem of SIP protocol depends on the robustness of SIP protocol stack. The security problem of SIP protocol can be solved by digging out the implementation loophole in SIP protocol stack and solving it in time, which can guarantee the robustness of SIP protocol stack and solve the security problem of SIP protocol stack. In the related industry, most of the SIP protocol stack is exploited by fuzzy test method. Fuzzy test method can mine some vulnerabilities of SIP protocol stack. However, only using fuzzy test method, the test set is large, the invalid test cases are many, and the efficiency of vulnerability mining is low. In order to improve the efficiency of vulnerability mining in fuzzy testing, this paper introduces symbol execution in fuzzy testing, and proposes a method to mine vulnerabilities in SIP protocol stack. The method of mining vulnerabilities in SIP stack is based on the risk function to find the trigger point of the vulnerability, and then calculate the trigger path of the risk function by using the mixed depth and width traversal algorithm. Then we use symbol execution technology to determine the condition of vulnerability trigger and generate abnormal SIP signaling set according to the condition. Finally, the abnormal SIP signaling set is screened by test effect evaluation module. Thus, the abnormal SIP signaling set with more obvious test effect is obtained. Experimental results show that the proposed method not only enhances the pertinence of test data, but also improves the efficiency and accuracy of implementing vulnerability mining for SIP stack.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】