Specification-based denial-of-service detection for SIP voice-over-IP networks

Proceedings - The 3rd International Conference on Internet Monitoring and Protection, ICIMP 2008

Volumn , Issue , 2008, Pages 59-66

  Ehlert, Sven ^a   Wang, Chengjian ^a   Magedanz, Thomas ^a   Sisalem, Dorgham ^b  

^a FRAUNHOFER FOKUS   (Germany)

^b Tekelec   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

DIESEL ENGINES; ELECTRIC BREAKDOWN; INTERNET; INTERNET TELEPHONY; TELECOMMUNICATION NETWORKS; TELECOMMUNICATION SYSTEMS; TELEPHONE SYSTEMS; VOICE/DATA COMMUNICATION SYSTEMS;

ATTACK DETECTION; DENIAL-OF -SERVICE; DETECTION FRAMEWORK; INTERNATIONAL CONFERENCES; INTERNET MONITORING; SECURITY THREATS; SIP PROTOCOL; VOICE-OVER IP;

INTERNET PROTOCOLS;

EID: 51849084814     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICIMP.2008.14     Document Type: Conference Paper

References (19)

1. J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Spark, M. Handley, and E. Schooler. Session Initiation Protocol, 2002. RFC 3261.
2. G. Camarillo and M.-A. Garcia-Martin. The 3G IP Multimedia Subsystem (IMS): Merging the Internet and the Cellular Worlds. John Wiley & Sons, 2006.
3. VoIP Security Alliance Threat Taxonomy and VoIP Security Tools. http://www.voipsa.org.
4. S. Vuong and Y. Bai. A Survey of VoIP Intrusions and Intrusion Detection Systems. In 6th International Conference on Advanced Communication Technology, 2004.
5. D. Sisalem, J. Kuthan, and S. Ehlert Denial of Service Attacks Targeting a SIP VoIP Infrastructure - Attack Scenarios and Prevention Mechanisms. IEEE Network Vol. 20, No. 5 - Special Issue on Securing VoIP, 2006.
6. R. Sekar, A. Gupta, J. Frullo, T. Shanbhag, A. Tiwari, H. Yang, and S. Zhou. Specification-based Anomaly Detection: A New Approach for Detecting Network Intrusions. In ACM Computer and Communication Security Conference (CCS), 2002.
7. E. Y. Chen. Detecting DoS Attacks on SIP Systems. In 1st IEEE Workshop on VoIP Management and Security, Vancouver, Canada, 2006.
8. P. Traong, D. Nieh, and M. Moh. Specification-based Intrusion Detection for H.323-based Voice over IP. In Fifth IEEE International Symposium on Signal Processing and Information Technology, December 2005.
9. H. Sengar, D. Wijesekera, H. Wang, and S. Jajodia. VoIP Intrusion Detection Through Interacting Protocol State Machines. In IEEE DSN'2006, June 2006.
10. S. Niccolini, R.S. Garroppo, S. Giordano, G. Risi, and S. Ventura. SIP Intrusion Detection and Prevention: Recommendations and Prototype Implementation. In 1st IEEE Workshop on VoIP Management and Security, April 2006.
11. M. Nassar, R. State, and O. Festor. Intrusion Detection Mechanisms for VoIP Applications. In 3rd Annual VoIP Security Workshop, Berlin, Germany, 2006.
12. Y. Rebahi. Change-Point Detection for Voice over IP Denial of Service Attacks. In 15. ITG/GI - Fachtagung Kommunikation in Verteilten Systemen, February 2007.
13. M. Roesch. Snort - Lightweight Intrusion Detection for Networks. In 13th USENIX USA Conference, 1999.
14. SER PIKE Excessive Traffic Monitoring Module. http://www.iptel.org/ser/ component/module/pike.
15. J. Mirkovic, S. Dietrich, D. Dittrich, and P. Reiher. Internet Denial of Senice: Attack and Defense Mechanisms. Prentice Hall, 2005.
16. J. Fiedler, T. Kupka, S. Ehlert, T. Magedanz, and D. Sisalem. VoIP Defender: Highly Scalable SIP-based Security Architecture. In Principles, Systems and Applications of IP Telecommunications (IPTComm 2007), New York, USA, July 2007.
17. Y. Rebahi, D. Sisalem, J. Kuthan, A. Pelinescu-Oncicul, B. Iancu, J. Janak, and. D. C. Mierla. The SIP Express Router - An Open Source SIP Platform. In Evolute Workshop, Guildford, UK, 2003. http://www.iptel.org/ser.
18. SIPp - SIP Traffic Generator, http://sipp.sourceforge.net.
19. C. Aggarwal, J. Wolf, and P. Yu. Caching on the World Wide Web. IEEE Transactions on Knowledge and Data Engineering, Vol. 11, No. 1, 1999.