SIP intrusion detection and prevention: Recommendations and prototype implementation

1st IEEE Workshop on VoIP Management and Security, VoIP MaSe 2006

Volumn , Issue , 2006, Pages 45-50

  Niccolini, S ^a   Garroppo, R G ^b   Giordano, S ^b   Risi, G ^b   Ventura, S ^c  

^a NEC LABORATORIES EUROPE   (Germany)

^b UNIVERSITY OF PISA   (Italy)

^c Institute of Territorial Engineering   (Switzerland)

Author keywords

End to end delay; Intrusion detection system; Intrusion prevention system; Quality of service; Security; SIP; Snort inline

Indexed keywords

COMPUTER ARCHITECTURE; DATABASE SYSTEMS; PROGRAM PROCESSORS; QUALITY OF SERVICE; SECURITY OF DATA; SOFTWARE PROTOTYPING; TELECOMMUNICATION NETWORKS;

END TO END DELAY; INTRUSION DETECTION SYSTEM; INTRUSION PREVENTION SYSTEM; SIP; SNORT INLINE;

NETWORK PROTOCOLS;

EID: 33751035543     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (13)

1. VOIP Security Alliance (VOIPSA) Security and Privacy Threat Taxonomy, Public Release 1.0, 24 October 2005
2. Snort home page, http://www.snort.org
3. Libpcap home page, http://sourceforge.net/projects/libpcap/
4. Netfilter home page, http://www.netfilter.org
5. oSIP library home page, http://www.gnu.org/software/osip/osip.html
6. J. Rosenberg et al., "SIP: Session Initiation Protocol", IETF RFC 3261, June 2002
7. Network Intrusion and QoS impact within VoIP, Qovia technical report, 2004
8. V. Smotlacha, Measurement of Time Servers, CESNET Tech. Rep. 18/2001, December, 2001
9. Nicola Bonelli, Stefano Giordano, Gregorio Procissi, Raffaello Secchi, BRUTE: A High Performance and Extensibile Traffic Generator, Proc. of International Symposium on Performance of Telecommunication Systems (SPECTS'05), July 24-28, 2005, Philadelphia (PA), USA
10. H. Schulzrine et al., "RTP: A Transport Protocol for Real-Time Applications", IETF RFC 3550, July 2003
11. Yu-Sung Wu, Saurabh Bagchi, Sachin Garg, Navjot Singh, Tim Tsai, "SCIDIVE: A Stateful and Cross Protocol Intrusion Detection Architecture for Voice-over-IP Environments", Proc. of International Conference on Dependable Systems and Networks 2004 (DSN'04)
12. J. Ransome, "Voice over Internet Protcol (VoIP) Security", Digital Press, November 2004
13. B. Caswell, G. Ramirez, J. Beale, N. Rathaus, "Nessus, Snort and Ethereal power tools: customizing open source security applications", September 2005