A framework for protecting a SIP-based infrastructure against malformed message attacks

Computer Networks

Volumn 51, Issue 10, 2007, Pages 2580-2593

  Geneiatakis, Dimitris ^a   Kambourakis, Georgios ^a   Lambrinoudakis, Costas ^a   Dagiuklas, Tasos ^a   Gritzalis, Stefanos ^a  

^a UNIVERSITY OF THE AEGEAN   (Greece)

Author keywords

Intrusion detection system; Malformed message attacks; Session initiation protocol; Voice over IP security

Indexed keywords

NETWORK PROTOCOLS; NETWORK SECURITY; SIGNAL DETECTION; TELECOMMUNICATION SERVICES;

INTRUSION DETECTION SYSTEMS; MALFORMED MESSAGE ATTACKS; SESSION INITIATION PROTOCOL (SIP); VOICE OVER IP SECURITY;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 33947123970     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2006.11.014     Document Type: Article

References (20)

1. VOIPSA, VoIP Security and Privacy Threat Taxonomy, October 2005. .
2. D. Sisalem, S. Ehlert, D. Geneiatakis, G. Kambourakis, T. Dagiuklas, J. Markl, M. Rokos, O. Botron, J. Rodriguez, J. Liu, Towards a Secure and Reliable VoIP, Deliverable 2.1, May 2005. .
3. Asterisk SIP Implementation Issue, August 2003. .
4. ® Advisory CA-2004-01, Multiple H.323 Message Vulnerabilities, April 2004. .
5. ® Advisory CA-2003-06, Multiple Vulnerabilities in Implementations of the Session Initiation Protocol (SIP), February 2003. .
6. CERT-In Advisory CIAD-2003-09, Buffer Overrun in RPC Interface Could Allow Code Execution and Denial of Service, August 2003.
7. J. Fontana, Exchange Server 5.5 Bug Could Be Exploited for Attacks, November 2000. .
8. V. Paxson, M. Auman, S. Dawson, W. Fenner, J. Griner, J. Heavens, K. Labey, J. Semke, B. Volt, Known TCP implementation problems, RFC 2525, March 1999.
9. C. Wieser, M. Laakso, H. Schulzrinne, Security Testing of SIP Implementations, 2003. .
10. J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Spark, M. Handley, E. Schooler, Session Initiation Protocol, RFC 3261, June 2002.
11. SIP Express Router. .
12. D. Geneiatakis, G. Kambourakis, T. Dagiuklas, C. Lambrinoudakis, S. Gritzalis, A framework for detecting malformed messages in SIP networks, in: Proceedings of 14th IEEE Workshop on Local and Metropolitan Area Networks (LANMAN), Chania, Crete, Greece, September 2005.
13. D. Geneiatakis, G. Kambourakis, C. Lambrinoudakis, T. Dagiuklas, S. Gritzalis, SIP message tampering: THE SQL code INJECTION attack, in: Proceedings of 13th International Conference on Software, Telecommunications and Computer Networks (SoftCOM 2005), Split, Croatia, September 2005.
14. Scott D., and Sharp R. Abstracting application-level web security. Proc. 11th Int'l World Wide Web Conf, May 2002 (2002), ACM Press, New York 396-407
15. S. Dharmapurikar, P. Krishnamurthy, T. Sproull, J. Lockwood, Deep packet inspection using parallel bloom filters, in: Proceedings 11th Symposium of High Performance Interconnects (HOTI'03), 2003, pp 44-71.
16. P. Srisuresh, J. Kuthan, J. Rosenberg, A. Molitor, A. Rayan, Middlebox communication architecture and framework, IETF, RFC 3303, August 2002.
17. D. Geneiatakis, G. Kambourakis, T. Dagiuklas, C. Lambrinoudakis, S. Gritzalis, SIP security mechanisms: a state-of-the-art review, in: Proceedings of the Fifth International Network Conference (INC 2005), Samos, Greece, July 2005.
18. Perl Compatible Regular Expressions. .
19. KPhone A Voice over Internet Phone. .
20. SIPBOMBER. .