Denial of service attacks targeting a SIP VoIP infrastructure: Attack scenarios and prevention mechanisms

IEEE Network

Volumn 20, Issue 5, 2006, Pages 26-31

  Sisalem, Dorgham ^a   Kuthan, Jiri ^a   Ehlert, Sven ^b  

^a Tekelec ^*  (Portugal)

^b FRAUNHOFER FOKUS   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

SERVICE ATTACK; SESSION INITIATION PROTOCOL; VOICE OVER INTERNET PROTOCOL;

COMPUTER PRIVACY; COMPUTER SYSTEMS; DOS; INTERNET; SERVERS;

NETWORK PROTOCOLS;

EID: 33750013256     PISSN: 08908044     EISSN: None     Source Type: Journal    
DOI: 10.1109/MNET.2006.1705880     Document Type: Article

References (12)

1. CSI and FBI, "2004 CSI/FBI Computer Crime and Security Survey," Mar. 2004.
2. J. Mirkovic et al., Internet Denial of Service: Attack and Defense Mechanisms, Prentice Hall, 2005.
3. J. Rosenberg et al., "Session Initiation Protocol," RFC 3261, 2002.
4. R. Fielding et al., "Hypertext Transfer Protocol - HTTP/1.1," RFC 2616, June 1999.
5. A. B. Johnston, SIP - Understanding the Session Initiation Protocol, 2nd ed., Artech House, 2004.
6. GPP Tech. Spec. 3GPP TS 24.228 "Technical Specification Group Core Network; Signaling Flows for the IP Multimedia Call Control Based on SIP and SDP," 2003.
7. J. Rosenberg et al., "STUN - Simple Traversal of UDP Through NATs," RFC 3489, Mar. 2003.
8. J. Rosenberg, "Request Header Integrity in SIP and HTTP Digest Using Predictive Nonces," expired Internet draft, work in progress, IETF, June 2001. draft-rosenberg-sip-http-pnonce-00.txt
9. J. Franks et al., "HTTP Authentication: Basic and Digest Access Authentication," Internet Engineering Task Force, RFC 2617, June 1999.
10. J. Kuthan, "Comparison of Service ------+Creation Approaches for SIP," Int'l. SIP Conf. 2000, Mar. 2000.
11. M. Handley et al., "SIP: Session Initiation Protocol," RFC 2543 (obsoleted), Mar. 1999.
12. J. Rosenberg and H. Schulzrinne, "Session Initiation Protocol (SIP): Locating SIP Servers," RFC 2543, June 2002.