【作者】 李佳； 魏更宇； 胡楠； 王枞； 杨义先；

【Author】 Li Jia~(1,2),Wei Gengyu~(1,2),Hu Nan~(1,2),Wang Cong~(1,2),Yang Yi -xian~(1,2) (1 Key Laboratory of network and infonnation attack & defense technology of MOE,Beijing University of Posts and Telecommunications,Beijing 100876,China;2National Engineering Laboratory for Disaster Backup and Recovery, Beijing University of Posts and Telecommunications,Beijing 100876,China)

【机构】 北京邮电大学网络与信息攻防技术教育部重点实验室； 北京邮电大学灾备技术国家工程实验室；

【摘要】 正则表达式被广泛应用于SIP畸形信令检测,为了更快速和更准确的生成正则表达式并将其应用于SIP畸形信令检测,本文提出了一种根据ABNF范式为RFC 3261中的SIP消息字段自动生成正则表达式的方法。实验表明,该方法生成的正则式对RFC 3261中的ABNF范式定义满足完备性和确定性,对不满足RFC 3261协议规定的畸形信令的检测正确率为100%,误检率为0。更多还原

【Abstract】 Regular expressions are widely used in detecting malformed SIP signaling.In order to generate faster and more accurate regular expression for detecting abnormal SIP signaling,an algorithm,which can automatically generate regular expressions according to ABNF pattern in RFC3261 of SIP rules is proposed.Experiments prove that the regular expressions generated by the method are completed and definite for the definition of the ABNF pattern in RFC 3261.Moreover,the detection rate for those messages which are not in compliance with the rules in RFC 3261 is 100%,and false detection rate is 0.更多还原