CPU-based DoS attacks against SIP servers

NOMS 2008 - IEEE/IFIP Network Operations and Management Symposium: Pervasive Management for Ubiquitous Networks and Services

Volumn , Issue , 2008, Pages 41-48

  Luo, Ming ^a   Peng, Tao ^a   Leckie, Christopher ^a  

^a UNIVERSITY OF MELBOURNE   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; AUTHENTICATION; COMPUTER CRIME; EQUIPMENT TESTING; INTERNET PROTOCOLS; INTERNET TELEPHONY; QUALITY OF SERVICE; SECURITY OF DATA; SERVERS; TELEPHONE SYSTEMS; UBIQUITOUS COMPUTING; VOICE/DATA COMMUNICATION SYSTEMS;

ATTACK SCENARIOS; AUTHENTICATION PROTOCOLS; CRITICAL INFRASTRUCTURES; DENIAL-OF-SERVICE ATTACKS; DOS ATTACKS; NETWORK OPERATIONS; OPEN SOURCES; RELIABILITY AND AVAILABILITY; SECURITY THREATS; SIP SERVER; TEST BEDS; UBIQUITOUS NETWORKS;

NETWORK MANAGEMENT;

EID: 51849159244     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NOMS.2008.4575115     Document Type: Conference Paper

References (20)

1. D. Geneiatakis, G. Kambourakis, T. Dagiuklas, C. Lambrinoudakis, and S. Gritzalis, "SIP security mechanisms: A state-of-the-art review," in Proceedings of the Fifth International Network Conference (INC 2005), Samos, Greece, 2005, pp. 147-155.
2. D. Sisalem, S. Ehlert, D. Geneiatakis, G. Kambourakis, T. Dagiuklas, Jiří, M. Rokos, O. Botron, J. Rodriguez, and J. Liu, "Towards a secure and reliable VoIP infrastructure," http://www.snocer.org/Paper/ COOP-005892-SNOCER-D2-1.pdf.
3. A. Conway and B. Khasnabish, "End-to-end network reliability modeling of enterprise VoIP services," in Proceedings of 10th IEEE/IFIP Network Operations and Management Symposium (NOMS 2006), Vancouver, Canada, April 2006, pp. 404-413.
4. T. Peng, C. Leckie, and K. Ramamohanarao, "Survey of network-based defense mechanisms countering the DoS and DDoS problems," ACM Comput. Surv., vol. 39, no. 1, 2007.
5. J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, M. H. R. Spark, and E. Schooler, "Session initiation protocol," RFC 3261, the Internet Engineering Task Force (IETF), 2002.
6. D. Sisalem, J. Kuthan, and G. Schäfer, "Denial of service attacks and SIP infrastructure:attack scenarios and prevention mechanisms," http://www.snocer.org/Paper/sisalem_dos.pdf.
7. J. H. J. Franks, P. Hallam-Baker, "HTTP authentication: Basic and digest access authentication," RFC 2617, the Internet Engineering Task Force (IETF), 1999.
8. "Open source SIP stack: PJSIP library," http://www.pjsip.org.
9. "Ubuntu linux," http://www.ubuntu.com.
10. "SIP Express Router (SER)," http://www.iptel.org.
11. "MySQL," http://www.mysql.com.
12. R. Rivest, "MD5 hashing scheme," RFC 1321, the Internet Engineering Task Force (IETF), 1992.
13. "PIKE module," http://www.iptel.org/ser/doc/modules/pike.
14. T. Peng, C. Leckie, and K. Ramamohanarao, "Prevention from distributed denial of service attacks using history-based IP filtering," in Proceedings of 38th IEEE International Conference on Communications (ICC 2003), Anchorage, Alaska, USA, August 2003, pp. 482-486.
15. V. D. Gligor, "A note on denial-of-service in operating systems," IEEE Trans. Softw. Eng., vol. 10, no. 3, pp. 320-324, 1984.
16. E. Y. Chen, "Detecting DoS attacks on SIP systems," in 1st IEEE Workshop on VoIP Management and Security, April 2006, pp. 53-58.
17. F. Cao and S. Malik, "Vulnerability analysis and best practices for adopting IP telephony in critical infrastructure sectors," in Proceedings of 1st International Conference on Security and Privacy for Emerging Areas in in Communication Networks, September 2005, pp. 171-180.
18. W. Marshall, A. F. Faryar, K. Kealy, G. de los Reyes, I. Rosencrantz, R. Rosencrantz, and C. Spielman, "Carrier VoIP security architecture," in Proceedings of 12th International Telecommunications and Network Strategy and Planning Symposium, NETWORKS 2006, November 2006, pp. 1-6.
19. A. Nascimento, A. Passito, E. Mota, E. Nascimento, and L. Carvalho, "Can I add a secure VoIP call?" in Proceedings of the 2006 International Symposium on a World of Wireless, Mobile and Multimedia Networks (WoWMoM'06), June 2006.
20. H. Abdelnur, V. Cridlig, R. State, and O. Festor, "VoIP security assessment: Methods and tools," in Proceedings of 1st IEEE Workshop on VoIP Management and Security, Vancouver, Canada, April 2006, pp. 29-34.