SIP Protector: Defense architecture mitigating DDoS flood attacks against SIP servers

IEEE International Conference on Communications

Volumn , Issue , 2012, Pages 6733-6738

  Stanek, Jan ^a   Kencl, Lukas ^a  

^a CZECH TECHNICAL UNIVERSITY IN PRAGUE   (Czech Republic)

Author keywords

[No Author keywords available]

Indexed keywords

BASE COMPONENTS; DEFENSE ARCHITECTURE; DEFENSE SOLUTIONS; DESTINATION TRAFFIC; PERFORMANCE EVALUATION; POTENTIAL ATTACK; SESSION INITIATION PROTOCOL; SIP SERVER; VOICE OVER IP;

FLOODS; INTERNET TELEPHONY; TELECOMMUNICATION SYSTEMS;

INTERNET PROTOCOLS;

EID: 84871990960     PISSN: 15503607     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2012.6364674     Document Type: Conference Paper

References (24)

1. J. Zar et al., VOIPSA VoIP Security and Privacy Threat Taxonomy. www.voipsa.org/Activities/VOIPSA Threat Taxonomy 0.1.pdf, 2005.
2. X. Deng and M. Shore, Advanced Flooding Attack on a SIP Server. International Conference on Availability, Reliability and Security, 2009.
3. Ming Luo, Tao Peng, C. Leckie, CPU-based DoS Attacks Against SIP Servers. NOMS, 2008.
4. G. Zhang, S. Ehlert, T. Magedanz, D. Sisalem, Denial of service attack and prevention on SIP VoIP Insfrastructures Using DNS Flooding. IPTCOMM, 2007.
5. D. Sisalem, J. Kuthan, S. Ehlert, Denial of Service Attacks Targeting a SIP VoIP Infrastructure: Attack Scenarios and Prevention Mechanisms. MNET, September/October 2006.
6. E. A. Blake, Network Security: VoIP Security on Data Network-A Guide. In Information Security Curriculum Development Conference, 2007.
7. M. Nassar, S. Nicollini, R. State, T. Ewald, Holistic VoIP Intrusion Detection and Prevention System. IPTCOMM, 2007.
8. J. Fiedler, T. Kupka, S. Ehlert, T. Magedanz, D. Sisalem, VoIP Defender: Highly Scalable SIP-based Security Architecture. IPTCOMM, 2007.
9. N. A. Chavhan and S. A. Chhabria, Multiple Design Patterns for Voice over IP Security. ICAC3, 2009.
10. D. Y. Ha et al., Design and Implementation of SIP-aware DDoS Attack Detection System. ICIS, 2009.
11. M. A. Akbar and M. Farooq, Application of Evolutionary Algorithms in Detection of SIP based Flooding Attacks. GECCO, July 2009.
12. C. Zhou, C. Leckie, K. Ramamohanarao, Protecting SIP Server from CPU-Based DoS Attacks using History-Based IP Filtering. LCOMM, 2009.
13. Chung-Hsin Liu and Chun-Lin Lo, The Simulation for the SIP DDoS Attack. NCM, 2009.
14. Asterisk Private Branch eXchange, http://www.asterisk.org/.
15. SIP: Session Initiation Protocol, http://www.ietf.org/rfc/rfc3261.txt.
16. Autonomous System numbers FAQ, www.apnic.net/services/servicesapnic- provides/helpdesk/faqs/asn-faqs.
17. H. D. Moore et al. Source list of attackers targetting metasploit.com.http://digitaloffense.net/tools/ddos sources 02.09.txt, 2009.
18. M. Voznak, F. Rezac SIP threats detection system. DNCOCO, 2010.
19. J. Stanek, L. Kencl SIPp-DD: SIP DDoS Flood-Attack Simulation Tool. ICCCN, 2011.
20. Z. Asgharian et al. A framework for SIP intrusion detection and response systems. CNDS, 2011.
21. I. Hussain, F. Nait-Abdesselam Strategy based proxy to secure user agent from flooding attacks in SIP. IWCMC, 2011.
22. C. Martinez, W. Lin Adaptive Hashing for IP Address Lookup in Computer Networks. IEEE ICON, 2006.
23. Twisted - an event-driven networking engine written in Python, http://twistedmatrix.com/trac/.
24. F. Huici, S. Niccolini, N. d'Heureuse Protecting SIP against Very Large Flooding DoS Attacks. GLOBECOM, 2009.