An ontology description for SIP security flaws

Computer Communications

Volumn 30, Issue 6, 2007, Pages 1367-1374

  Geneiatakis, Dimitris ^a   Lambrinoudakis, Costas ^a  

^a UNIVERSITY OF THE AEGEAN   (Greece)

Author keywords

Attack description; Intrusion detection system; Ontology; Session initiation protocol; Voice over IP

Indexed keywords

COMPUTER CRIME; CRYPTOGRAPHY; INTERNET; NETWORK PROTOCOLS; ONTOLOGY;

ATTACK DESCRIPTION; SESSION INITIATION PROTOCOL (SIP); VOICE OVER IP;

INTRUSION DETECTION;

EID: 33947149035     PISSN: 01403664     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comcom.2006.12.023     Document Type: Article

References (19)

1. VOIPSA, VoIP Security and Privacy Threat Taxonomy http://www.voipsa.org/Activities/taxonomy.php, October 2005.
2. D. Geneiatakis, A. Dagiouklas, G. Kambourakis, C. Lambrinoudakis, S. Gritzalis, S. Ehlert, D. Sisalem, Survey of Security Vulnerabilities in Session Initiation Protocol, IEEE Communications Surveys and Tutorials, vol. 8 (3), IEEE Press, 2006, pp. 68-81.
3. SNORT the defacto standard for intrusion detection/prevention. Available from: .
4. BRO Intrusion Detection System. Available from: www.bro-ids.org.
5. Gruber T. Towards principles for the design of ontologies used for knowledge sharing. Formal Ontology in Conceptual Analysis and Knowledge Representation (1993), Kluwer
6. Undercoffer J., Joshi A., and Pinkston A. Modeling computer attacks: an ontology for intrusion detection. Lecture Notes in Computer Science 2820 (2003) 113-135
7. J. Undercoffer, A. Joshi, T. Finin, J. Pinkston, A target-centric ontology for intrusion detection, in: 18th International Joint Conference on Artificial Intelligence, Acapulco, Mexico. Available from: .
8. J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Spark, M. Handley, E. Schooler, Session Initiation Protocol, RFC 3261, June 2002.
9. T. Dagiuklas, D. Geneiatakis, G. Kambourakis, D. Sisalem, S. Ehlert, J. Fiedler, J. Markl, M. Rokos, O. Botron, J. Rodriguez, J. Liu, General Reliability and Security Framework for VoIP Infrastructures. Available from: , Aug. 2005.
10. C. Wieser, M. Laakso, H. Schulzrinne, Security testing of SIP implementations. Available from: , 2003.
11. D. Geneiatakis, G. Kambourakis, T. Dagiuklas, C. Lambrinoudakis, S. Gritzalis, A framework for detecting malformed messages in SIP networks, in: Proceedings of 14th IEEE Workshop on Local and Metropolitan Area Networks (LANMAN), September 2005, Chania, Crete, Greece, 2005.
12. McGuinness D.L., Fikes R., Hendler J., and Stein L.A. DAML+OIL: An Ontology Language for the Semantic Web. In IEEE Intelligent Systems 17 5 (2002) 72-80
13. T. Dierks, C. Allen, The TLS Protocol Version 1.0, RFC 2246, January 1999.
14. S. Kent, R. Atkinson, Security architecture for the Internet Protocol, RFC 2401, November 1998.
15. Geneiatakis D., Kambourakis G., Lambrinoudakis C., Dagiouklas A., and Gritzalis S. A framework for protecting a SIP-based infrastructure against malformed message attacks. Comput. Netw. (2007) 10.1016/j.comnet.2006.11.014
16. OWL WEb Ontology Language Guide. Available from: .
17. L. Kagal, Rei: A Policy Language for the Me-Centric Project, HP Labs Technical Report, HPL-2002-270, 2002.
18. M. Johnson, P. Chang, R. Jeffers, J. Bradshaw, M. Breedy, L. Bunch, S. Kulkarni, J. Lott, N. Suri, A. Uszok, V.W. Soo, KAoS Semantic Policy and Domain Services: an application of DAML to web services-based grid architectures, in: Proceedings of the AAMAS 03 workshop on Web Services and Agent-Based Engineering, Melbourne, Australia, July 2003.
19. Foundation for Intelligent Physical Agent, Specification for Agent Communication. Available from: .