Secure IP Telephony using Multi-layered Protection

Proceedings of the Symposium on Network and Distributed System Security, NDSS 2003

Volumn , Issue , 2003, Pages

  Reynolds, Brennen ^a   Ghosal, Dipak ^a  

^a University of California Davis   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET PROTOCOLS; NETWORK SECURITY; PARAMETER ESTIMATION; SIGNAL DETECTION;

APPLICATION LAYERS; DENIALOF- SERVICE ATTACKS; DESIGN AND ANALYSIS; DETECTION ALGORITHM; ENTERPRISE NETWORKS; IP-TELEPHONY; MULTI-LAYER PROTECTION; MULTI-LAYERED; PROTECTION SCHEMES; TRANSPORT LAYERS;

DENIAL-OF-SERVICE ATTACK;

EID: 84864246613     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (31)

1. M. Basseville and I. V. Nikiforov. Detection of Abrupt Changes: Theory and Application. Prentice Hall, 1993.
2. B. E. Brodsky and B. S. Darkhovsky. Nonparametric Methods in Changepoint Problems. Kluwer Academic Publishers, 1993.
3. Bronzesoft.org. SYN cookies firewall. World Wide Web, http://www.bronzesoft.org/projects/scfw, 2002.
4. J. Burns and D. Ghosal. Design and analysis of a new algorithm for automatic detection and control of media stimulated focused overloads. In Proceedings of International Teletraffic Congress, Edinburgh, June 1997.
5. C. C. Center. Trends in denial of service attack technology. World Wide Web, http://www.cert.org/archive/pdf/DoS_trends.pdf, Oct. 2001.
6. W. Cheswick and S. Bellovin. Firewalls and Internet Security. Addison Wesley Longman, Inc., New York, NY, 1st edition, 1994.
7. K. Claffy, G. Polyzos, and H. Braun. Application of sampling methodologies to network traffic characterization. In Proceedings of ACM SIGCOMM, San Francisco, Sept. 1993.
8. R. Daniel and M. Mealling. RFC 2168: Resolution of Uniform Resource Identifiers using the Domain Name System, June 1997.
9. C. Estan and G. Varghese. New directions in traffic measurement and accounting. In Proceedings of ACM SIGCOMM, Pittsburg, Aug. 2002.
10. S. Floyd and V. Jacobson. Random Early Detection Gateways for Congestion Avoidance. IEEE/ACM Transactions on Networking, 1(4):397–413, Aug. 1993.
11. A. Garg and A. Reddy. Mitigation of dos attacks through qos regulation. In Proceedings of IEEE International Workshop on Quality of Service (IWQoS), Miami Beach, May 2002.
12. I.-T. R. H.323. Visual telephone systems and equipment for local area networks which provide a non-guaranteed quality of service, May 1996.
13. J. Ioannidis and S. Bellovin. Implementing pushback: Router-based defense against DDoS attacks. In Proceedings of Network and Distributed System Security Symposium, San Diego, Feb. 2002.
14. J. Jedwab, P. Phall, and B. Pinna. Traffic estimation for the largest sources on a network, using packet sampling with limited storage. Technical Report 35, Hewlett Packard Labs, Mar. 1992.
15. A. Johnston, S. Donovan, R. Sparks, C. Cunningham, D. Willis, J. Rosenberg, K. Summers, and H. Schulzrinne. Internet draft: SIP call flow examples, Apr. 2002. Work in Progress.
16. J. Kohl and C. Neuman. RFC 1510: The Kerberos Network Authentication Service (V5), Sept. 1993.
17. J. Lemon. Resisting SYN flood DoS attacks with a SYN cache. In Proceedings of USENIX BSDCon 2002, San Francisco, Feb. 2002.
18. R. Mahajan, S. Bellovin, S. Floyd, J. Vern, and P. Scott. Controlling high bandwidth aggregates in the network. Technical Report 1, University of California, Berkeley - International Computer Science Institute, Feb. 2001.
19. J. Mirkovic, J. Martin, and P. Reiher. A taxonomy of DDoS attacks and DDoS defense mechanisms. Technical Report 18, University of California, Los Angeles - Computer Science Department, 2002.
20. B. Reynolds and D. Ghosal. STEM: Secure Telphony Enabled Middlebox. IEEE Communications Magazine, 40(10), Oct. 2002.
21. C. Rigney, S. Willens, A. Rubens, and W. Simpson. RFC 2865: Remote Authentication Dial in User Service (RADIUS), June 2000.
22. J. Rosenberg and H. Schulzrinne. RFC 2871: A Framework for Telephony Routing over IP, June 2000. Status: Informational.
23. J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Sparks, M. Handley, and E. Schooler. Internet draft: SIP: Session initiation protocol, Feb. 2002. Work in Progress.
24. T. Russell. Signaling System 7. McGraw-Hill, New York, NY, 3rd edition, 2000.
25. C. Schuba, I. Krsul, M. Kuhn, E. Spafford, A. Sundaram, and D. Zamboni. Analysis of a denial of service attack on TCP. In Proceedings of the 1997 IEEE Symposium on Security and Privacy, pages 208–223. IEEE Computer Society, IEEE Computer Society Press, May 1997.
26. H. Schulzrinne and J. Rosenberg. Internet Telephony: Architecture and Protocols - an IETF Perspective. Computer Networks, 31(3):237–255, 1999.
27. R. Stevens. TCP/IP Illustrated Volume 1: The Protocols, volume 1. Addison Wesley Longman, Inc., Reading, MS, 1st edition, 1994.
28. Telecost. Enterprise call durations distributions. World Wide Web, http://www.telecost.co.uk/pages/OnCallDurations.htm, 2002.
29. K. Thompson, G. J. Miller, and R. Wilder. Wide-area internet traffic patterns and characteristics. IEEE Network, 11(6), Dec. 1997.
30. H. Wang, D. Zhang, and K. Shin. Detecting SYN flooding attacks. In Proceedings of IEEE INFOCOM 2002, New York, June 2002.
31. D. Yau, J. Lui, and F. Liang. Defending against distributed denial-of-service attacks with max-min fair server-centric router throttles. In Proceedings of IEEE International Workshop on Quality of Service (IWQoS), Miami Beach, May 2002.