VoIP intrusion detection through interacting protocol state machines

Proceedings of the International Conference on Dependable Systems and Networks

Volumn 2006, Issue , 2006, Pages 393-402

  Sengar, Hemant ^a   Wijesekera, Duminda ^a   Wang, Haining ^b   Jajodia, Sushil ^a  

^a George Mason University   (United States)

^b The College of William and Mary   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET; NETWORK PROTOCOLS; SPEECH COMMUNICATION; TELECOMMUNICATION SERVICES; TELECOMMUNICATION TRAFFIC; VOICE/DATA COMMUNICATION SYSTEMS;

INTRUSION DETECTION SYSTEMS; VOICE OVER INTERNET PROTOCOL (VOIP); VOICE STREAMS;

SECURITY OF DATA;

EID: 33845562254     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2006.73     Document Type: Conference Paper

References (21)

1. O. Arkin. Why E.T. Can't Phone Home? - Security Risk Factors with IP Telephony. Presentation, AusCERT Australia, 2004.
2. M. Handley and V. Jacobson. SDP: Session Description Protocol. RFC 2327, IETF Network Working Group, 1998.
3. C. Hoare. Communicating Sequential Processes. In Communications of the ACM, 21(8), pages 666-677, 1978.
4. G. Holzmann. Design and Validation of Computer Protocols. Prentice Hall, 1st edition, 1991.
5. K. Ilgun, R. A. Kemmerer, and P. A. Porras. State transition analysis: A rule-based intrusion detection approach. IEEE Transactions on Software Engineering, 21 (3): 181-199, March 1995.
6. A. Johnston. SIP Understanding the Session Initiation Protocol. Artech House, 2nd edition, 2004.
7. D. Lee and M. Yannakakis. Principles and methods of testing finite state machines - A survey. In Proceedings of the IEEE, Vol 84, pages 1089-1123, August 1996.
8. A. Niemi. Authentication of SIP calls. In Tik-110.501 Seminar on Network Security, 2000.
9. OPNET. Optimum Network Performance, Modeler Tool Version 9.1. Network Simulation Tool, http://www.opnet.com/, 2003.
10. A. Petrenko, S. Boroday, and R. Groz. Confirming Configurations in EFSM Testing. In IEEE Transactions on Software Engineering (TSE), January 2004.
11. th System Administration Conference (LISA), USENIX Association, pages 229-238, November 1999.
12. J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Sparks, M. Handley, and E. Schooler. SIP: Session Initiation Protocol. RFC 3261, IETF Network Working Group, 2002.
13. S. Salsano, L. Veltri, and D. Papalilo. SIP Security Issues: The SIP Authentication Procedure and its Processing Load. In IEEE Networks, pages 38-44, November 2002.
14. H. Schulzrinne, S. Casner, R. Frederick, and V. Jacobson. RTP: A Transport Protocol for Real-Time Applications. RFC 1889, IETF Network Working Group, 1996.
15. R. Sekar, A. Gupta, J. Frullo, T. Shanbhag, A. Tiwari, H. Yang, and S. Zhou. Specification-based anomaly detection : A new approach for detecting network intrusions. In ACM Computer and Communication Security Conference (CCS), Washington DC, November 2002.
16. Tipping Point. Intrusion Prevention : The Future of VoIP Security. White paper, http://www.tippingpoint.com/solutions.voip.html, 2005.
17. G. Vigna, S. Gwalani, K. Srinivasan, E. Belding-Royer, and R. Kemmerer. An Intrusion Detection Tool for AODV-based Ad Hoc Wireless Networks. In Proceedings of the Annual Computer Security Applications Conference (ACSAC), pages 16-27, Tucson, AZ, December 2004.
18. th Annual Computer Security Application Conference (ACSAC 1998), Scottsdale, Arizona, December 1998.
19. G. Vigna, W. Robertson, V. Kher, and R. Kemmerer. A Stateful Intrusion Detection System for World-Wide Web Servers. In Proceedings of the Annual Computer Security Applications Conference (ACSAC 2003), pages 34-43, Las Vegas, NV, December 2003.
20. Y. Wu, S. Bagchi, S. Garg, N. Singh, and T. Tsai. SCIDIVE: A Stateful and Cross Protocol Intrusion Detection Architecture for Voice-over-IP Environments. In IEEE Dependable Systems and Networks Conference (DSN 2004), June 2004.
21. H. Yamaguchi, K. Okano, T. Higashino, and K. Taniguchi. Synthesis of Protocol Entities Specifications from Service Specifications in a Petri Net Model with Registers. In 15th International Conference on Distributed Computing Systems (ICDCS'95), May 1995.