SIP (session initiation protocol) registration method for defending extranet attack

Abstract

The invention relates to an SIP (Session Initiation Protocol) registration method for defending an extranet attack, which comprises a static defense rule and a dynamic defense rule, and the static defense rule is used for limiting an IP address which is allowed to be registered; the dynamic defense rule is as follows: judging whether password verification is successful or not during SIP registration request, if not, increasing the number of errors corresponding to the extension number under the IP address, and if the number of errors is greater than an error number threshold, limiting the IP address for registration of the extension number; and when the number of the extension numbers which are limited to be registered under the IP address is greater than the threshold value of the number of the extension numbers which are not allowed to be registered, limiting the IP address for registration of any extension number. The invention provides a simple and effective defense method, security defense can be realized through simple configuration, enterprise clients are helped to safely register a VoIP account number of an intranet and make a call under the condition that a public network needs to be exposed for realizing remote office, complex security configuration is reduced, and an ideal effect is realized.

Description

technical field [0001] The invention relates to the technical field of communications, in particular to a SIP registration method for defending against external network attacks. Background technique [0002] As a new-age product that replaces traditional PBXs, IP-PBX is widely deployed in enterprise LANs. Generally speaking, if the company's office locations are not all in the same office building, or some staff members often go out and need to use the company's internal IP-PBX, it must be accessed through the public network and must be on the company's firewall or router Configure the SIP (Session Initiation Protocol, Session Initiation Protocol) port mapping of the IP-PBX, otherwise the softphone or IP phone on the external network cannot register to the IP-PBX and initiate a call. [0003] Through port mapping to achieve VoIP communication network penetration, so that the user's internal equipment is directly exposed to the public network environment, there will be hacke...

AI Technical Summary

Problems solved by technology

[0003] Through port mapping to achieve VoIP communication network penetration, so that the user's internal equipment is directly exposed to the public network environment, there will be hackers to detect and use brute force registration to connect to the user's IP-PBX, by initiating a large number of calls or dialing a specified Number to achieve profit, causing huge loss of call charges to the enterprise

If the access to the external network is restricted by configuring a firewall, the public address used by the out-of-towners will change, which will greatly affect the normal use of the out-of-towners.

Images