A security evaluation of IMS deployments

IMSAA'08 - 2nd International Conference on Internet Multimedia Services Architecture and Application

Volumn , Issue , 2008, Pages

  Park, Frank S ^a   Patnaik, Devdutt ^a   Amrutkar, Chaitrali ^a   Hunter, Michael T ^a  

^a Georgia Institute of Technology   (United States)

Author keywords

IMS; IP Multimedia Subsystem; Security; Threat Modeling; Vulnerability Assessment

Indexed keywords

INSULATING MATERIALS; INTERNET; INTERNET PROTOCOLS; MULTIMEDIA SYSTEMS; TELECOMMUNICATION EQUIPMENT;

IMS; IP MULTIMEDIA SUBSYSTEM; SECURITY; THREAT MODELING; VULNERABILITY ASSESSMENT;

MULTIMEDIA SERVICES;

EID: 62449122081     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IMSAA.2008.4753937     Document Type: Conference Paper

References (21)

1. PP TR 33.978: Security aspects of early IP Multimedia Subsystem (IMS) (Release 7). June 2007.
2. PP TS 29.328: IP Multimedia (IM) Subsystem Sh interface; Signaling flows and message contents (Release 5). March 2005.
3. PP TS 33.203: Access security for IP-based services (Release 8). March 2008.
4. PP TS 33.210: Network Domain Security; IP network layer security (Release 5). March 2002.
5. RFC 2401: Security Architecture for the Internet Protocol. November 1998.
6. RFC 2617: HTTP Authentication: Basic and Digest Access Authentication. June 1999.
7. RFC 3261: Session Initiation Protocol. June 2002.
8. RFC 3265: Session Initiation Protocol (SIP)-Specific Event Notification. June 2002.
9. RFC 3310: Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA). September 2002.
10. RFC 3588: Diameter Base Protocol. September 2003.
11. IMS-Communicator, an IMS softphone - http://developer.berlios.de/ projects/imscommunicator/
12. The Open IMS Project - http://www.openimscore.org/
13. Nmap. Free Security Scanner For Network Exploration & Hacking - http://nmap.org/
14. Scapy,an interactive packet manipulation program - http://www.secdev.org/ projects/scapy.
15. Vishal Kumar Singh and Henning Schulzrinne, "A Survey of Security Issues and Solutions in presence", Columbia University Technical Report CUCS-019-06, New York, NY, Feb 2006.
16. Gonzalo Camarillo and Miguel A. Garc'Ia-Mart'In, The 3G IP Multimedia Subsystem (IMS), Second Edition, ,
17. David Endler and Mark Collier Hacking Exposed VoIP : Voice Over IP Security Secrets & Solution. http://www.hackingvoip.com. 2006.
18. D. Geneiatakis, G. Kambourakis, C. Lambrinoudakis, T. Dagiuklas, S. Gritzalis, SIP message tampering: THE SQL code INJECTION attack, in: Proceedings of 13th International Conference on Software, Telecommunications and Computer Networks (SoftCOM 2005), Split, Croatia, September 2005.
19. Stefano Giola. Understanding the Home Subscriber Server (HSS) Sh Interface. BEA Dev2Dev Article. October 2006.
20. M. Hunter, R. Clark, and F. Park. Security Issues with the IP Multimedia Subsystem (IMS). From the MNCNA Workshop. November 2007.
21. Frank Swiderski and Window Snyder. Threat Modeling. Microsoft Corporation. 2004.