众所周知,VoIP技术在未来语音通信中所占的比重越来越大。随着VoIP的不断发展,基于SIP协议的VoIP应用也不断增多。但是,由于SIP协议高度依赖于开放的IP网络,使得其安全性逐渐成为关注和探讨的焦点。主要分析了SIP协议网络面临的一些安全威胁,包括典型的外部攻击技术和协议自身存在的漏洞等。探讨了为应对SIP安全威胁提出的加密、认证等安全策略并且分析了这些安全策略的优缺点,提出了针对SIP安全策略进一步改进的方向,旨在不断提高和完善基于SIP协议的安全性能。
It is well known that the VoIP technology would take a growing share of voicecommunications in the future. With the development of VoIP,the applications of VoIP based on SIP arealso increasing. However,owing to the highly dependence on IP network,the security of SIP graduallybecames the focus attention and discussion. In this paper the security threats in SIP protocol is mainlyandlyzed,including the typical external attack technology and the loopholes in the protocol itself. Thenthe security policy of encryption and authentications for the security threats of SIP are discussed,theadvantages and disadvantages of this security policies are also analyzed. At last the direction of furtherimprovement is put forward for the security policies of SIP,aimed at improving and perfecting thesecurity of SIP.