Is IP Multimedia Subsystem affected by 'malformed message' attacks? An evaluation of open IMS

SECRYPT 2011 - Proceedings of the International Conference on Security and Cryptography

Volumn , Issue , 2011, Pages 275-280

  Vrakas, Nikos ^a   Geneiatakis, Dimitris ^b   Lambrinoudakis, Costas ^a  

^a UNIVERSITY OF PIRAEUS   (Greece)

^b Columbia University ^*  (United States)

Author keywords

IP multimedia subsystem; Malformed message attacks; Security; Session initiation protocol

Indexed keywords

ATTACK SCENARIOS; END TO END DELAY; IP MULTIMEDIA SUBSYSTEMS; MEMORY CONSUMPTION; MESSAGE ATTACK; OPEN-IP; SECURITY; SESSION INITIATION PROTOCOLS;

CRYPTOGRAPHY; TELECOMMUNICATION EQUIPMENT;

INTERNET PROTOCOLS;

EID: 80052478378     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (9)

1. 3GPP, 2008. TS 23.228: IP Multimedia Subsystems (IMS), Third Generation Partnership Project, Technical Specification Group Services and System Aspects.
2. 3GPP, 2010. TS 33.203: 3G security; Access security for IP-based services (Release 10): Third Generation Partnership Project, Technical Specification Group Services and System Aspects.
3. Geneiatakis, D. et al., 2006. Survey of security vulnerabilities in session initiation protocol. Communications Surveys & Tutorials, IEEE, 8(3), 68-81.
4. Geneiatakis, D. et al., 2007. A framework for protecting a SIP-based infrastructure against malformed message attacks. Computer Networks, 51(10), 2580-2593.
5. Keromytis, A. D., 2010. Voice-over-IP Security: Research and Practice. IEEE Security and Privacy, 8(2), 76-78.
6. Niccolini, S. et al., 2006. SIP intrusion detection and prevention: recommendations and prototype implementation. In VoIP Management and Security, 2006. 1st IEEE Workshop on. VoIP Management and Security, 2006. 1st IEEE Workshop on. pp. 47-52.
7. OSVBD, 2007. Asterisk SIP channel driver SIP malformed UDP packet DoS. Available at: http://osvdb.org/show/osvdb/34482.
8. Rosenberg, J. et al., 2002. SIP: Session Initiation Protocol, RFC 3261.
9. Wieser, C. and Laakso, M., 2003. Security Testing of SIP Implementations, 1-2003