A framework for detecting malformed messages in SIP networks

14th IEEE Workshop on Local and Metropolitan Area Networks, LANMAN 2005

Volumn , Issue , 2005, Pages

  Geneiatakis, Dimitris ^a   Kambourakis, Georgios ^a   Dagiuklas, Tasos ^a   Lambrinoudakis, Costas ^a   Gritzalis, Stefanos ^a  

^a UNIVERSITY OF THE AEGEAN   (Greece)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET; ROBUSTNESS (CONTROL SYSTEMS); SERVERS; TELECOMMUNICATION SERVICES;

MESSAGE ATTACKS; NETWORK SERVERS; SECURITY FLAWS; SIP NETWORKS;

SECURITY OF DATA;

EID: 42749104168     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/LANMAN.2005.1541543     Document Type: Conference Paper

References (14)

1. Paxson V., Auman M., Dawson S., Fenner W., Griner J., Heavens J., Labey K., Semke J., and B.Volt., "Known TCP implementation problems". RFC 2525, March 1999.
2. CERT-In Advisory CIAD-2003-09 "Buffer Overrun In RFC Interface Could Allow Code Execution and Denial of Service" August 2003.
3. Fontana J., "Exchange Server 5.5 Bug Could Be Exploited for Attacks", http://www.poworld.com/resouroe/article/0,aid,33882,00.asp, November 2000.
4. "Asterisk SIP Implementation Issue", http://www.atstake.com/ researoh/advisories/2003/a090403-l.txt, August 2003
5. CERT® Advisory CA-2004-01, "Multiple H.323 Message Vulnerabilities", http://www.cert.org/advisories/CA-2004-01.html, April 2004..
6. CERT® Advisory CA-2003-06, "Multiple vulnerabilities in implementations of the Session Initiation Protocol (SIP)", http://www.cert.org/advisories/CA-2003-06.html February 2003.
7. Wieser C, Laakso M, Sohulzrinne H, "Security testing of SIP implementations", http://compose.labri.fr/documentation/sip/Documentation/ Papers/Security/Papers/462.pdf, 2003.
8. Rosenberg J., Schulzrinne H., Camarillo G., Johnston A., Peterson J., Spark R., Handley M., Schooler E., "Session Initiation Protocol", RFC 3261, June 2002.
9. Donovan S., "The SIP INFO Method", RFC 2976, October 2000.
10. Rosenberg J., "The Session Initiation Protocol (SIP) UPDATE Method", RFC 3311, September 2002.
11. Spark R., "The Session Initiation Protocol (SIP) Refer Method", RFC 3515, April 2003.
12. Scott D. and Sharp R., "Abstracting Application-Level Web Security," Proc. 11th Int'l World Wide Web Conf., ACM Press, New York, May 2002, pp. 396-407.
13. Dharmapurikar S., Krishnamurthy P., Sproull T., and Lockwood J., "Deep Packet Inspection Using Parallel Bloom Filters." In Proceedings 11th Symposium of High Performance Interconnects (HOTI'03), pages 44-71, 2003.
14. Srisuresh P., Kuthan J., Rosenberg J., Molitor A. and Rayan A: "Middlebox Communication Architecture and framework", IETF, RFC 3303, August 2002.