Ȩ > Ç¥ÁØÈ °³¿ä > TTAÀÇ Ç¥ÁØÇöȲ
Ç¥ÁعøÈ£ | TTAE.IF-RFC5360 | ±¸Ç¥ÁعøÈ£ | |
---|---|---|---|
Á¦°³Á¤ÀÏ | 2011-12-21 | ÃÑÆäÀÌÁö | 33 |
ÇѱÛÇ¥Áظí | SIPÀ» ÀÌ¿ëÇÑ µ¿ÀDZâ¹ÝÅë½Å ÇÁ·¹ÀÓ¿öÅ© | ||
¿µ¹®Ç¥Áظí | A Framework for Consent-Based Communications in the Session Initiation Protocol (SIP) | ||
Çѱ۳»¿ë¿ä¾à | SIPÀº ½Ç½Ã°£ ¿Àµð¿À, ºñµð¿À, ÅؽºÆ®, ÀνºÅÏÆ® ¸Þ½Ã¡, ÇÁ·¹Á𽺠µî ´Ù¾çÇÑ ¼ºñ½º »ó¿¡¼ÀÇ Åë½ÅÀ» Áö¿øÇÑ´Ù. ÇöÀç SIP¿¡¼´Â ¼¼¼Ç ÃÊ´ë, ÀνºÅÏÆ® ¸Þ½ÃÁö, ¹× ±âŸ ¿äûÀÌ Âø½ÅÀÚÀÇ ¸í½ÃÀûÀÎ µ¿ÀÇ ¾øÀÌ Àü´ÞµÈ´Ù. ±×·² °æ¿ì SIPÀÌ DoS °ø°Ý µî°ú °°Àº ¾ÇÀÇÀûÀÎ ¸ñÀûÀ¸·Î ÀÌ¿ëµÉ ¼ö ÀÖ´Ù. ÀÌ¿¡, ÀÌ Ç¥ÁØ¿¡¼´Â SIP¿¡¼ÀÇ µ¿ÀÇ ±â¹Ý Åë½ÅÀ» À§ÇÑ ÇÁ·¹ÀÓ¿öÅ©¸¦ Á¦½ÃÇÑ´Ù. | ||
¿µ¹®³»¿ë¿ä¾à | SIP supports communications for several services, including real-time audio, video, text, instant messaging, and presence. In its current form, it allows session invitations, instant messages, and other requests to be delivered from one party to another without requiring explicit consent of the recipient. Without such consent, it is possible for SIP to be used for malicious purposes, including amplification and DoS (Denial of Service) attacks. This document identifies a framework for consent-based communications in SIP. | ||
±¹Á¦Ç¥ÁØ | |||
°ü·ÃÆÄÀÏ | TTAE_[1].IF-RFC5360.pdf |