A Method For Evaluation Of IP Multimedia Subsystem Resistance To Distributed Denial Of Service Attacks

Višemedijski podsustav zasnovan na internetskom protokolu (IMS) omogucava operaterima pružanje telekomunikacijskih usluga u stacionarnim i pokretnim mrežama koristeci kao osnovu internetski protokol (IP). IMS sustav je sa Interneta izložen napadima uskracivanja resursa (DoS). Distribuirani DoS (DDoS) napad predstavlja stvaran sigurnosni problem IMS sustavima koji može dovesti do potpunog prekida u pružanju usluga korisnicima. U procesu odreivanja potrebnih zaštitnih mjera IMS sustava protiv DDoS napada procjena utjecaja DDoS napada na IMS sustav jedan je od važnijih koraka. Vjerodostojnu procjenu otpornosti sustava na DDoS napade može pružiti utvrivanje ponašanja sustava za vrijeme stvarnog napada te je zbog toga u okviru ovog rada razvijena metoda odreivanja otpornosti IMS sustava na DDoS napade koja se temelji na mjerenju pokazatelja rada IMS sustava za vrijeme stvarnih DDoS napada. Provoenje DDoS napada se provodi programskim pomagalom koje je razvijeno u okviru izrade rada. Metoda je verificirana u laboratorijskom okruženju.IP Multimedia Subsystem (IMS) provides IP based telecommunication services in wireless and wire line networks. IMS is exposed to denial of service (DoS) attacks from Internet. Distributed DoS (DDoS) attacks represent real danger to IMS systems that might become unavailable to its users during DDoS attacks. Estimation of DDoS attacks impacts on IMS system is important input for process of selection of appropriate security measures against DDoS attacks. Reliable estimation of impacts of DDoS attacks on IMS system could be acquired by testing IMS performance during real DDoS attack. That idea has been implemented in a method that evaluates IMS resistance to DDoS attacks by performing real DDoS attacks. DDoS attacks are carried out with software tool that has been developed for this purpose. The method has been verified on real IMS system in laboratory environment