Protecting SIP server from CPU-based DoS attacks using history-based IP filtering

IEEE Communications Letters

Volumn 13, Issue 10, 2009, Pages 800-802

  Zhou, Chenfeng Vincent ^a   Leckie, Christopher ^a   Ramamohanarao, Kotagiri ^a  

^a UNIVERSITY OF MELBOURNE   (Australia)

Author keywords

CPU based DoS attacks; VoIP

Indexed keywords

CPU UTILIZATION; CPU-BASED DOS ATTACKS; DENIAL OF SERVICE ATTACKS; DOS ATTACKS; EMPIRICAL EVALUATIONS; IP NETWORKS; REGISTRATION SERVERS; SESSION INITIATION PROTOCOL; SIGNALLING PROTOCOLS; SIP SERVER; VOICE OVER IP; VOIP;

COMPUTER CRIME; INTERNET TELEPHONY; VOICE/DATA COMMUNICATION SYSTEMS;

INTERNET PROTOCOLS;

EID: 70350489420     PISSN: 10897798     EISSN: None     Source Type: Journal    
DOI: 10.1109/LCOMM.2009.090840     Document Type: Article

References (8)

1. "PIKE module," http://www.iptel.org/ser/doc/modules/pike.
2. "SIP Express Router." [Online]. Available: http://www.iptel.org/ser
3. J. Chan, C. Leckie, and T. Peng, "Hitlist worm detection using source IP address history," in Proc. ATNAC, 2006.
4. J. Jung, B. Krishnamurthy, and M. Rabinovich, "Flash crowds and denial of service attacks: Characterization and implications for CDNs and web sites," in Proc. WWW, 2002, pp. 293-304.
5. M. Luo, T. Peng, and C. Leckie, "CPU-based DoS attacks against SIP servers," in Proc. NOMS, 2008.
6. T. Peng, C. Leckie, and K. Ramamohanarao, "Prevention from distributed denial of service attacks using history-based IP filtering," in Proc. ICC, 2003.
7. RedIRIS, "POSTFIX MTA whitelist configuration." [Online]. Available: http://www.rediris.es/abuses/eswl/data/mtawl.postfix.txt
8. S. Salsano, L. Veltri, and D. Papalilo, "SIP security issues: The SIP authentication procedure and its processing load," IEEE Network, vol. 16, no. 6, pp. 38-44, 2002