The Research And Implementation Of Security In SIP Protocol Of Video Surveillance System

With the development of internet technology, real-time video surveillance has been a more wide range of application. SIP protocal provided it with much rich service.But faced with a variety of security threats, such as registration hijacking, fake server, tampering with message bodies, off-line password guessing, denial of service and so on. So we focus on the resolution to reduce these risks.This article analyzed the SIP security issues. At first we divided these issues into three categories: confidentiality, integrity, availability. And focuses on a number of typical security issues of confidentiality, such as registration hijacking, camouflage server problems offline password guessing.we analyzed and compared the various of SIP authentication mechanism. According to the existing HTTP authentication and HTTP digest two-way authentication base on digest mechanism, we gave a way--optimize two-way authentication HTTP digest. This is still the use of MD5 authentication method has the same problem of the HTTP digest two-way authentication, but more efficient. But there is still this way, there are hidden dangers digest authentication. So the resulting design of a mechanism based on the RSA asymmetric key authentication mechanism of SIP security. It includes two modes: non-symmetric SIP authentication and SIP authentication signature style. These two methods can effectively guarantee the confidentiality of security. RSA as a result of safety and security in MD5, which is why this security authentication method is superior to HTTP authentication abstract.Because RSA is more Satety and security than MD5, this security authentication method is better than HTTP digest authentication. This paper puts forward authcode active defense mechanism model, can prevent BaoLiShi attack, and can effectively reduce the denial of service attack threat, enhance the system availability.This paper describes the entire system, mainly realizes the embedded real-time h.264 video broadcast system and SIP safety system, including SIP safe authentication using signature type SIP authenticationIn this paper, the main solution to improve the confidentiality of the SIP, and availability issues in the realization of the problem of DOS and the integrity of the issue will be the focus of future work.