A novel method for detecting attacks towards the SIP protocol

Proceedings of the 2009 International Symposium on Performance Evaluation of Computer and Telecommunication Systems, SPECTS 2009

Volumn , Issue , 2009, Pages 268-273

  Callegari, Christian ^a   Garroppo, Rosario G ^a   Giordano, Stefano ^a   Pagano, Michele ^a   Russo, Franco ^a  

^a UNIVERSITY OF PISA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION SECURITY; DENIAL OF SERVICE; DETECTING ATTACKS; HIGH ORDER MARKOV CHAIN; IN-NETWORK; INTRUSION DETECTION SYSTEMS; KEY ELEMENTS; MARKOVIAN MODEL; NOVEL METHODS; SECURITY ATTACKS; SIP PROTOCOL; STATISTICAL TECHNIQUES; WORK FOCUS;

COMPUTER CRIME; INTERNET TELEPHONY; INTRUSION DETECTION; MARKOV PROCESSES; TELECOMMUNICATION LINKS; TELECOMMUNICATION TRAFFIC; VOICE/DATA COMMUNICATION SYSTEMS;

INTERNET PROTOCOLS;

EID: 70449122360     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. Kemmerer, R.A., Vigna, G., Intrusion Detection: a Brief History and Overview, IEEE Security and Privacy (supplement to Computer, vol. 35, no. 4) pp 27-30, April 2002.
2. Niccolini, S., Garroppo, R.G., Giordano, S., Risi, G., Ventura, S., SIP Intrusion Detection and Prevention: Recommendations and Prototype Implementation, 1st IEEE Workshop on VoIP Management and Security, 2006.
3. Chen, E.Y., Detecting DoS Attacks on SIP Systems, 1st IEEE Workshop on VoIP Management and Security, 2006.
4. Sengar, H., Wijesekera, D., Wang, H., Jajodia, S., VoIP Intrusion Detection Through Interacting Protocol State Machines, International Conference on Dependable Systems and Networks, 2006.
5. Chen, E.Y., Intrusion detection system for signal based SIP attacks through timed HCPN, The Second International Conference on Availability, Reliability and Security (ARES), 2007.
6. Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, A., Peterson, J., Handley, M., Schooler, E., RFC 3261: SIP: Session Initiation Protocol, .
7. VOIPSA Voice Over IP Security Alliance [on line] Available at http://www.voipsa.org.
8. Endler, D., Collier, M., Hacking VoIP Exposed, Voice over IP Security Secrets and Solutions 1st ed. US: McGraw-Hill, 2006.
9. Ju, W-H and Vardi, Y., A Hybrid High-order Markov Chain Model for Computer Intrusion Detection, NISS, Technical Report Number 92, February 1999.
10. Raftery, A.E., A model for high-order Markov chains, Journal of the Royal Statistical Society, series B, 47, 528-539, 1985.
11. Raftery, A.E. and Tavare, S. Estimation and modelling repeated patterns in high-order Markov chains with the mixture transition distribution (MTD) model, Journal of the Royal Statistical Society, series C - Applied Statistics, 43, 179-200, 1994.
12. Vardi, Y. and Lee, D., From Image deblurring to Optimal investments: Maximum Likelihood Solutions for Positive Linear Inverse Problem, Journal of the Royal Statistical Society, series B, 55, 569-612, 1993.
13. Callegari, C., Vaton, S., and Pagano, M., A New Statistical Approach to Network Anomaly Detection, International Symposium on Performance Evaluation of Computer and Telecommunication Systems (SPECTS 2008).
14. Mood, A.M., Graybill, F.A., and D. C. Boes, D.C., Introduction to the Theory of Statistics 3rd ed. Tokyo, Japan: McGraw-Hill, 1974.
15. SIP Express Router [on line] Available at http://www.iptel.org/ser.
16. X-Lite softphone [on line] Available at http://www.ivoice.it, .
17. SJphone - The sjlabs softphone [on line] Available at http://www.sjlabs.com, .
18. SIPp software [on line] Available at http://www.sipp.souceforge.net.
19. Wireshark Libpcap Sniffer [on line] Available at http://www.wireshark. com.