SCIDIVE: A stateful and cross protocol intrusion detection architecture for voice-over-IP environments

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2004, Pages 433-442

  Wu, Yu Sung ^a   Bagchi, Saurabh ^a   Garg, Sachin ^b   Singh, Navjot ^b   Tsai, Tim ^c  

^a Purdue University   (United States)

^b AVAYA LABS RESEARCH   (United States)

^c SUN MICROSYSTEMS   (United States)

Author keywords

Cross protocol detection; Intrusion detection; RTP; SIP; Stateful detection; Voice over IP system

Indexed keywords

CROSS-PROTOCOL DETECTION; INTRUSION DETECTION; RTP; SIP; STATEFUL DETECTION; VOICE OVER IP SYSTEM;

ALGORITHMS; DATA ACQUISITION; DEMODULATION; PACKET NETWORKS; PATTERN RECOGNITION; PROBABILITY DENSITY FUNCTION; SERVERS; SYSTEMS ANALYSIS;

NETWORK PROTOCOLS;

EID: 4544342880     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1021/nl035162i     Document Type: Conference Paper

References (17)

1. G. Vigna, W. Robertson, V. Kher, R.A. Kemmerer, "A Stateful Intrusion Detection System for World-Wide Web Servers," In Proceedings of the 19th Annual Computer Security Applications Conference (ACSAC '03), December '03.
2. ITU-T, "Packet-based multimedia communications systems," Recommendation H.323, February 1998.
3. M. Handley et. al. "SIP: Session Initiation Protocol," RFC 2543, March 1999.
4. H. Schulzrinne, S. Casner, R. Frederick, and V. Jacobson, "RTF: A Transport Protocol for Real-Time Applications," IETF, RFC 3550, July 2003,Available at: http://www.ietf.org/rfc/rfc3550.txt?nurnber=3550.
5. M. Arango et al., "Media Gateway Control Protocol (MGCP) Version 1.0," RFC 2705, October 1999.
6. F. Cuervo et. al., "Megaco Protocol Version 1.0," RFC 3015, November 2000.
7. ITU-T, "Call Signaling protocols and media stream packetization for packet-based multimedia communication systems," Recommendation H.225.0, February 1988.
8. ITU-T, "Control protocol for multimedia communication," Recommendation H.245, September 1988.
9. Yu-Sung Wu, Bingrui Foo, Yongguo Mei, and Saurabh Bagchi, "Collaborative Intrusion Detection System (CIDS): A Framework for Accurate and Efficient IDS," In Proceedings of the 19th Annual Computer Security Applications Conference (ACSAC '03), December '03.
10. M. Roesch, "Snort - Lightweight Intrusion Detection for Networks," In Proceedings of USENIX LISA'99, November 1999.
11. S.T. Eckmann, G. Vigna, and R.A. Kemmerer, "STATL: An Attack Language for State-based Intrusion Detection," Journal of Computer Security, 10(1/2):71-104, 2002.
12. CERT Coordination Center, Carnegie Mellon Software Engineering Institute, "Vulnerabilities, Incidents and Fixes."
13. "Prelude Hybrid IDS," At: http://www.prelude-ids.org
14. IBM Software, "IBM Tivoli Intrusion Manager," At: http://www.ibm.com/software/tivoli/products/intrusion-mgr/
15. P. A. Porras AND P. G. Neumann, "EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances," in Proc. 20th National Information Systems Security Conference, October 1997, pp. 353-365.
16. F. Cuppens and A. Miege, "Alert Correlation in a Cooperative Intrusion Detection Framework", In IEEE Symposium on Security and Privacy, Oakland, USA, 2002.
17. Peng Ning, Yun Cui, Douglas S. Reeves, "Constructing Attack Scenarios through Correlation of Intrusion Alerts", In Proceedings of the ACM CCS 2002, pages 245-254, November 2002.