Intrusion detection in voice over IP environments

International Journal of Information Security

Volumn 8, Issue 3, 2009, Pages 153-172

  Wu, Yu Sung ^a   Apte, Vinita ^a   Bagchi, Saurabh ^a   Garg, Sachin ^b   Singh, Navjot ^c  

^a PURDUE UNIVERSITY   (United States)

^b YAHOO RESEARCH   (United States)

^c AVAYA LABS RESEARCH   (United States)

Author keywords

Correlation based IDS; Cross protocol detection; Intrusion detection; RTP; SIP; Stateful detection; Voiceover IP system

Indexed keywords

CORRELATION-BASED IDS; CROSS-PROTOCOL DETECTION; RTP; SIP; STATEFUL DETECTION; VOICEOVER IP SYSTEM;

COMPUTER CRIME; INTERNET PROTOCOLS; INTERNET TELEPHONY; RAPID THERMAL ANNEALING; VOICE/DATA COMMUNICATION SYSTEMS;

INTRUSION DETECTION;

EID: 67349141318     PISSN: 16155262     EISSN: 16155270     Source Type: Journal    
DOI: 10.1007/s10207-008-0071-0     Document Type: Article

References (17)

1. ITU-T: Packet-based multimedia communications systems. Recommendation H.323 February (1998)
2. Handley, M. et al.: SIP: Session Initiation Protocol. RFC 2543, March (1999)
3. Schulzrinne, H., Casner, S., Frederick, R., Jacobson, V.: RTP: A Transport Protocol for Real-Time Applications. IETF, RFC 3550, July (2003)
4. Arango, M. et al.: Media Gateway Control Protocol (MGCP) Version 1.0. RFC 2705 October (1999)
5. Cuervo, F. et al.: Megaco Protocol Version 1.0. RFC 3015, November (2000)
6. Baugher, M. et al.: The Secure Real-time Transport Protocol (SRTP). RFC 3711. March (2004)
7. The Snort Intrusion Detection System: http://www.snort.org
8. Express Router, S.I.P.: (ser) http://www.iptel.org/ser/
9. X-Lite: http://xten.com/index.php?menu=X-Series
10. Prelude Hybrid IDS. Available at: http://www.prelude-ids.org
11. Software, I.B.M.: IBM Tivoli IntrusionHManager. Available at: http:// www.ibm.com/software/tivoli/products/intrusionmgr/
12. Giovanni Vigna: William Robertson, Vishal Kher, Richard A. Kemmerer: A stateful intrusion detection system for world-wide web servers. In: Proceedings of the 19th Annual Computer Security Applications Conference. Las Vegas, Nevada 8-12 December 2003
13. Debian GNU/Linux: KDEHK-Phone. Available at: http://www.wirlab.net/ kphone/
14. Microsoft, "MSN Messenger v. 6.1," Available at: http:// www.messenger.msn.com/
15. ITU-T: Call Signaling protocols and media stream packetization for packet-based multimedia communication systems. Recommendation H.225.0, February (1988)
16. ITU-T: Control protocol for multimedia communication. Recommendation H.245, September (1988)
17. tcpdump/libpcap, Available at: http://www.tcpdump.org/