SIP security mechanisms: A state-of-the-art review

Proceedings of the 5th International Network Conference, INC 2005

Volumn , Issue , 2005, Pages 147-155

  Geneiatakis, Dimitris ^a   Kambourakis, Georgios ^a   Dagiuklas, Tasos ^a   Lambrinoudakis, Costas ^a   Gritzalis, Stefanos ^a  

^a UNIVERSITY OF THE AEGEAN   (Greece)

Author keywords

Security mechanisms; Session initiation protocol (SIP); Voice over internet protocol (VoIP)

Indexed keywords

INTERNET TELEPHONY; NETWORK SECURITY; VOICE/DATA COMMUNICATION SYSTEMS;

COMMERCIAL DEPLOYMENT; CRITICAL ANALYSIS; SECURITY MECHANISM; SECURITY PROBLEMS; SESSION INITIATION PROTOCOL; SIGNALLING PROTOCOLS; STATE-OF-THE-ART REVIEWS; VOICE OVER INTERNET PROTOCOL;

INTERNET PROTOCOLS;

EID: 84905240565     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. Arkko, J., Torvinen, V., Camarillo, G., Niemi A. and Haukka T. (2003), Security Mechanism Agreement for the Session Initiation Protocol RFC 3329 IETF.
2. Calhoun, P., Loughney, J., Guttman, E., Zorn, G. and Arkko, J. (2003), Diameter Base Protocol RFC 3588 IETF.
3. Falstrom, P. (2000), E.164 Number and DNS, RFC 2916, IETF.
4. Ferguson, N., Schneier, B. (2003), Practical Cryptography, Wiley Publications.
5. Franks, J., Hallam-Baker, P., Hostetler, J., Lawrence, S., Leach, P., Luotonen, A. and Stewart, L. (1999), HTTP Authentication RFC 2617 IETF.
6. James S. Tiller (2000), A technical guide to IPSec Virtual Private Networks Auerbach publications.
7. Noureldien A.N. (1999), Protecting Web Servers from DoS/DDoS Flooding Attacks A Technical Overview, www.diplomacy.edu/Conferences/WMIO/PAPERS-&- PRESENTATIONS/Noureldien/NOURELDIEN.pdf(Accessed 13/12/2004).
8. Ofir, A. (2002a), Security Risk Factors with IP Telephony based Networks http://www.syssecurity.com/html/projects/VoIP.html(Accessed 13/12/2004).
9. Ofir, A. (2002b), The Trivial Cisco IP Phones Compromise Security analysis of the implications of deploying Cisco Systems' SIP-based IP Phones model 7960, http://www.sys-security.com/html/projects/VoIP.html(Accessed 13/12/2004).
10. Paulson, D.L. (2004), Smart Phone Virus is Discovered Linda Dailey Paulson August IEEE internet Computing.
11. Peterson, J. (2002), A Privacy Mechanism for the Session Initiation Protocol (SIP), RFC 3323, IETF.
12. Peterson, J. (2003), Enhancements for authenticated identity management in the session initiation protocol (SIP), Internet-Draft.
13. Rescorla, E. (2000), SSL and TLS Designing and Building Secure Systems . Addison Wesley.
14. Rigney, C. Willens, S. Rubens, A. and Simpson, W. (2000), Remote Authentication Dial In User Service (RADIUS) RFC 2865, IETF.
15. Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, A., Peterson, J., Spark, R., Handley, M. and Schooler, E. (2002), Session Initiation Protocol, RFC 3261 IETF.
16. Salsano, S., Veltri, L. and Papalilo, D., (2002), . SIP Security Issues: The SIP authentication procedure and its processing load, IEEE Network.
17. Schulzrinne, H. (1999), Converging on Internet Telephony IEEE internet Computing.
18. Sparks, R. (2003), The Session Initiation Protocol (SIP) Refer Method, RFC 3515 IETF.
19. Sparks, R. (2004), The Session Initiation Protocol (SIP) Referred-By Mechanism, RFC 3892, IETF.
20. Stukas, M. and Sicker, C.D., (2004), An Evaluation of VoIP Traversal of Firewalls and NATs within an Enterprise Environment, Information Systems Frontiers, 6(3), 219-228, Kluwer Academic Publishers.
21. Varshney, U., Snow, A., McGivern, M. and Christi Howard (2002), Voice Over IP Communications of the ACM Vol. 45, No. 1.
22. Wieser, C., Laakso, M. and Schulzrinne, H. (2003), Security testing of SIP implementations, http://compose.labri.fr/documentation/sip/Documentation/ Papers/Security/Papers/462.pdf (Accessed 13/12/2004).