A novel method for detecting attacks towards the SIP protocol

International Symposium on Performance Evaluation of Computer and Telecommunication Systems 2009, SPECTS 2009, Part of the 2009 Summer Simulation Multiconference, SummerSim 2009

Volumn , Issue , 2009, Pages 268-273

  Callegari, Christian ^a   Garroppo, Rosario G ^a   Giordano, Stefano ^a   Pagano, Michele ^a   Russo, Franco ^a  

^a UNIVERSITY OF PISA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION SECURITY; DENIAL OF SERVICE; DETECTING ATTACKS; HIGH ORDER MARKOV CHAIN; INTRUSION DETECTION SYSTEMS; KEY ELEMENTS; MARKOVIAN MODEL; SECURITY ATTACKS; SIP PROTOCOL; STATISTICAL TECHNIQUES;

INTERNET TELEPHONY; MARKOV PROCESSES; TELECOMMUNICATION SYSTEMS; TELECOMMUNICATION TRAFFIC; VOICE/DATA COMMUNICATION SYSTEMS;

COMPUTER SIMULATION;

EID: 84871491335     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. Kemmerer, R.A., Vigna, G., Intrusion Detection: a Brief History and Overview, IEEE Security and Privacy (supplement to Computer, vol. 35, no. 4) pp 27-30, April 2002
2. Niccolini, S., Garroppo, R.G., Giordano, S., Risi, G., Ventura, S., SIP Intrusion Detection and Prevention: Recommendations and Prototype Implementation, 1st IEEE Workshop on VoIP Management and Security, 2006
3. Chen, E.Y., Detecting DoS Attacks on SIP Systems, 1st IEEE Workshop on VoIP Management and Security, 2006
4. Sengar, H., Wijesekera, D., Wang, H., Jajodia, S., VoIP Intrusion Detection Through Interacting Protocol State Machines, International Conference on Dependable Systems and Networks, 2006
5. Chen, E.Y., Intrusion detection system for signal based SIP attacks through timed HCPN, The Second International Conference on Availability, Reliability and Security (ARES), 2007
6. Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston A., Peterson, J., Handley, M., Schooler, E., RFC 3261: SIP: Session Initiation Protocol
7. VOIPSA Voice Over IP Security Alliance [on line] Available at http://www.voipsa.org
8. Endler, D., Collier, M., Hacking VoIP Exposed, Voice over IP Security Secrets and Solutions 1st ed. US: McGraw-Hill, 2006.
9. Ju, W-H and Vardi, Y., A Hybrid High-order Markov Chain Model for Computer Intrusion Detection, NISS, Technical Report Number 92, February 1999.
10. Raftery, A.E., A model for high-order Markov chains, Journal of the Royal Statistical Society, series B, 47, 528-539, 1985.
11. Raftery, A.E. and Tavare, S. Estimation and modelling repeated patterns in high-order Markov chains with the mixture transition distribution (MTD) model, Journal of the Royal Statistical Society, series C - Applied Statistics, 43, 179-200, 1994.
12. Vardi, Y. and Lee, D., From Image deblurring to Optimal investments: Maximum Likelihood Solutions for Positive Linear Inverse Problem, Journal of the Royal Statistical Society, series B, 55, 569-612, 1993.
13. Callegari, C., Vaton, S., and Pagano, M., A New Statistical Approach to Network Anomaly Detection, International Symposium on Performance Evaluation of Computer and Telecommunication Systems (SPECTS 2008).
14. Mood, A.M., Graybill, F.A., and D. C. Boes, D.C., Introduction to the Theory of Statistics 3rd ed. Tokyo, Japan: McGraw-Hill, 1974.
15. SIP Express Router [on line] Available at http://www.iptel.org/ser
16. X-Lite softphone [on line] Available at http://www.ivoice.it
17. SJphone - The sjlabs softphone [on line] Available at http://www.sjlabs.com
18. SIPp software [on line] Available at http://www.sipp.souceforge.net
19. Wireshark Libpcap Sniffer [on line] Available at http://www.wireshark.com