SIP Security

SIP Security

Volumn , Issue , 2009, Pages 1-336

  Sisalem, Dorgham ^a   Floroiu, John ^b   Kuthan, Jiri ^c   Abend, Ulrich ^e   Schulzrinne, Henning ^d  

^a TECHNISCHE UNIVERSITÄT BERLIN   (Germany)

^b FRAUNHOFER FOKUS   (Germany)

^c Tekelec   (United States)

^d Columbia University ^*  (United States)

^e NONE

Author keywords

[No Author keywords available]

Indexed keywords

HUMAN RESOURCE MANAGEMENT; INTERNET PROTOCOLS; INTERNET TELEPHONY; NETWORK SECURITY; STUDENTS; VOICE/DATA COMMUNICATION SYSTEMS;

GRADUATE STUDENTS; MARKET MATURITY; NETWORK ENGINEERS; NON REPUDIATION; PRACTICAL SOLUTIONS; REGULATORY ASPECTS; SECURITY ISSUES; SECURITY MECHANISM;

DENIAL-OF-SERVICE ATTACK;

EID: 84947768665     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1002/9780470516997     Document Type: Book

References (309)

1. 282001 ES 2008 NGN Functional Architecture. ETSI Standard Telecommunications and Internet Converged Services and Protocols for Advanced Networking (TISPAN), ETSI.
2. 187003 TS 2008 Security Architecture. Technical Specification Telecommunications and Internet Converged Services and Protocols for Advanced Networking (TISPAN), ETSI.
3. 282004 ES 2008 Network Attachment Sub-System (NASS). ETSI Standard Telecommunications and Internet Converged Services and Protocols for Advanced Networking (TISPAN), ETSI.
4. 11.11 TS 2007 Specification of the Subscriber Identity Module-Mobile Equipment (SIM-ME) Interface. Technical specification group terminals, 3rd Generation Partnership Project.
5. 23.003 TS 2008 Numbering, addressing and identification. Technical specification group core network and terminals, 3rd Generation Partnership Project.
6. 23.060 TS 2008 General Packet Radio Service (GPRS); Service description; Stage 2. Technical Specification Group Services and System Aspects, 3rd Generation Partnership Project.
7. 23.101 TS 2007 General Universal Mobile Telecommunications System (UMTS) architecture. Technical specification group core network and terminals, 3rd Generation Partnership Project.
8. 23.107 TS 2007 Quality of service (QoS) concept and architecture. Technical specification group core network and terminals, 3rd Generation Partnership Project.
9. 24.008 TS 2008 Mobile radio interface Layer 3 specification; Core network protocols; Stage 3. Technical specification group core network and terminals, 3rd Generation Partnership Project.
10. 24.228 TS 2006 Signalling flows for the IP multimedia call control based on session initiation protocol (SIP) and session description protocol (SDP). Technical specification group core network and terminals, 3rd Generation Partnership Project.
11. 24.229 TS 2005 IP multimedia call control protocol based on Session Initiation Protocol (SIP) and Session Description Protocol (SDP); Stage 3 (Release 7). Technical specification group core network and terminals, 3rd Generation Partnership Project.
12. 29.162 TS 2008 Interworking between the IM CN subsystem and IP networks. Technical specification group core network and terminals, 3rd Generation Partnership Project.
13. 29.198 TS 2001 Open Service Architecture (OSA) Application Programming Interface (API)-Part 1. Technical specification group core network and terminals, 3rd Generation Partnership Project.
14. 29.207 TS 2005 Policy control over Go interface. Technical specification group core network and terminals, 3rd Generation Partnership Project.
15. 29.208 TS 2007 End-to-end Quality of Service (QoS) signalling flows. Technical specification group core network and terminals, 3rd Generation Partnership Project.
16. 29.209 TS 2007 Policy control over Gq interface. Technical specification group core network and terminals, 3rd Generation Partnership Project.
17. 29.228 TS 2008 IP Multimedia (IM) Subsystem Cx and Dx Interfaces; Signalling flows and message contents. Technical specification group core network and terminals, 3rd Generation Partnership Project.
18. 29.278 TS 2005 Customized Applications for Mobile network Enhanced Logic (CAMEL); CAMEL Application Part (CAP) specification for IP Multimedia Subsystems (IMS). Technical specification group core network and terminals, 3rd Generation Partnership Project.
19. 29.328 TS 2008 IP Multimedia Subsystem (IMS) Sh interface; Signalling flows and message contents. Technical specification group core network and terminals, 3rd Generation Partnership Project.
20. 31.101 TS 2007 UICC-terminal interface; Physical and logical characteristics. Technical specification group core network and terminals, 3rd Generation Partnership Project.
21. 31.102 TS 2008 Characteristics of the Universal Subscriber Identity Module (USIM) application. Technical specification group core network and terminals, 3rd Generation Partnership Project.
22. 31.103 TS 2008 Characteristics of the IP Multimedia Services Identity Module (ISIM) application. Technical specification group core network and terminals, 3rd Generation Partnership Project.
23. 33.102 TS 2002 3G security; Security architecture. Technical Specification Group Services and System Aspects, 3rd Generation Partnership Project.
24. 33.203 TS 2007 3G Security; Access security for IP-based services. Technical Specification Group Services and System Aspects, 3rd Generation Partnership Project.
25. 33.210 TS 2008 3G security; Network Domain Security (NDS); IP network layer security. Technical Specification Group Services and System Aspects, 3rd Generation Partnership Project.
26. 33.310 TS 2007 Network Domain Security (NDS); Authentication Framework (AF). Technical Specification Group Services and System Aspects, 3rd Generation Partnership Project.
27. 33.828 TR 2008 IMS media plane security. Technical Specification Group Services and System Aspects, 3rd Generation Partnership Project.
28. 33.978 TR 2007 Security aspects of early IP Multimedia Subsystem (IMS). Technical Specification Group Services and System Aspects, 3rd Generation Partnership Project.
29. 35.201 TS 2007 3G Security; Specification of the 3GPP Confidentiality and Integrity Algorithms; Document 1: f8 and f9 Specification. Technical Specification Group Services and System Aspects, 3rd Generation Partnership Project.
30. 35.206 TS 2007 3G Security; Specification of the MILENAGE Algorithm Set: An example algorithm set for the 3GPP authentication and key generation functions f1, f1*, f2, f3, f4, f5 and f5*; Document 2: Algorithm Specification. Technical Specification Group Services and System Aspects, 3rd Generation Partnership Project.
31. Abadi M, Birrell AD, Burrows M, Dabek F and Wobber T 2003 Bankable postage for network services ACSC: Asian Computing Science Conference, LNCS.
32. Abdelnur H, Avanesor T, Rusinowitch M and State R 2008 Abusing SIP authentication. International Symposium on Information Assurance and Security, pp. 237-242. IEEE Computer Society, Los Alamitos, CA.
33. Aboba B and Beadles M 1999 The Network Access Identifier RFC 2486 (Proposed Standard). Obsoleted by RFC 4282.
34. Aboba B, Blunk L, Vollbrecht J, Carlson J and Levkowetz H 2004 Extensible Authentication Protocol (EAP) RFC 3748 (Proposed Standard). Updated by RFC 5247.
35. Aboba B, Beadles M, Arkko J and Eronen P 2005 The Network Access Identifier RFC 4282 (Proposed Standard).
36. Acharya A, Kandlur D and Pradhan P 2005 Differentiated handling of SIP messages for VoIP call control. United States patent 20050105464.
37. Adams C, Farrell S, Kause T and Mononen T 2005 Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP) RFC 4210 (Proposed Standard).
38. AES 2001 FIPS 197: Advanced Encryption Standard (AES). Federal Information Processing Standards publication, NIST.
39. Al-Muhtadi J, Campbell R, Kapadia A, Mickunas MD and Yi S 2002 Routing through the mist: Privacy preserving communication in ubiquitous computing environments. ICDCS '02: Proceedings of the 22nd International Conference on Distributed Computing Systems (ICDCS'02), 74. IEEE Computer Society, Washington, DCA.
40. Andersen S, Duric A, Astrom H, Hagen R, Kleijn W and Linden J Internet Low Bit Rate Codec (iLBC) RFC 3951 (Experimental).
41. Andreasen F 2008 SDP Capability Negotiation. Internet Draft draft-ietf-mmusic-sdp-capabilitynegotiation-09, Internet Engineering Task Force. Work in progress.
42. Andreasen F and Wing D 2007 Security Preconditions for Session Description Protocol (SDP) Media Streams RFC 5027 (Proposed Standard).
43. Andreasen F, Baugher M and Wing D 2006 Session Description Protocol (SDP) Security Descriptions for Media Streams RFC 4568 (Proposed Standard).
44. Andrews M 1998 Negative Caching of DNS Queries (DNS NCACHE) RFC 2308 (Proposed Standard). Updated by RFCs 4035, 4033, 4034.
45. Arango M, Dugan A, Elliott I, Huitema C and Pickett S 1999 Media Gateway Control Protocol (MGCP) Version 1.0 RFC 2705 (Informational). Obsoleted by RFC 3435, updated by RFC 3660.
46. Arkko J, Torvinen V, Camarillo G, Niemi A and Haukka T 2003 Security Mechanism Agreement for the Session Initiation Protocol (SIP) RFC 3329 (Proposed Standard).
47. Arkko J, Carrara E, Lindholm F, Naslund M and Norrman K 2004 MIKEY: Multimedia Internet KEYing RFC 3830 (Proposed Standard). Updated by RFC 4738.
48. Arkko J, Lindholm F, Naslund M, Norrman K and Carrara E 2006 Key Management Extensions for Session Description Protocol (SDP) and Real Time Streaming Protocol (RTSP) RFC 4567 (Proposed Standard).
49. Asokan N, Niemi V and Nyberg K 2002 Man-in-the-middle in tunnelled authentication protocols. In 11th Security Protocols Workshop.
50. Atkins D and Austein R 2004 Threat Analysis of the Domain Name System (DNS) RFC 3833 (Informational).
51. Atkins D, Stallings W and Zimmermann P 1996 PGP Message Exchange Formats RFC 1991 (Informational). Obsoleted by RFC 4880.
52. Audet F 2008 The use of the SIPS URI scheme in the session initiation protocol (SIP). Internet draft, draft-ietf-sip-sips-09, Internet Engineering Task Force. Work in Progress.
53. Back A 2003 The Hashcash Proof-of-Work Function. www.hashcash.org/papers/draft-hashcash.txt.
54. Baker F and Savola P 2004 Ingress Filtering for Multihomed Networks RFC 3704 (Best Current Practice).
55. Banks G, Cova M, Felmetsger V, Almeroth K, Kemmerer R and Vigna G 2006 SNOOZE: toward a Stateful NetwOrk prOtocol fuzZEr. Proceedings of the Information Security Conference (ISC) LNCS. Springer, Samos.
56. Barford P, Kline J, Plonka D and Ron A 2002 A signal analysis of network traffic anomalies. IMW '02: Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment, 71-82. ACM Press, New York.
57. Baset S and Schulzrinne H 2006 An analysis of the skype peer-to-peer internel telephony protocol. Proceedings of the INFOCOM '06.
58. Basseville M and Nikiforov IV 1993 Detection of Abrupt Changes: Theory and Application. Prentice-Hall, Upper Saddle River, NJ.
59. Baugher M, McGrew D, Naslund M, Carrara E and Norrman K 2004 The Secure Real-time Transport Protocol (SRTP) RFC 3711 (Proposed Standard).
60. Berners-Lee T, Fielding R and Masinter L 1998 Uniform Resource Identifiers (URI): Generic Syntax RFC 2396 (Draft Standard). Obsoleted by RFC 3986, updated by RFC 2732.
61. Bernstein D, 2005 Cache-timing attacks on AES. Technical report, University of Illinois in Chicago.
62. Best K and Walsh N 2001 A URN Namespace for OASIS RFC 3121 (Informational).
63. Biham E, Biryukov A and Shamir A 2005 Cryptanalysis of Skipjack Reduced to 31 Rounds using Impossible Differentials, 291-311. Springer, London.
64. Biham E and Shamir A 1991. Differential cryptanalysis of DES-like cryptosystems. CRYPTO'90 & Journal of Cryptology 4(1), 3-72.
65. Bin D, Furong W and Ke J 2006 Performance analysis of signaling using SigComp scheme in narrowband system. 3rd Consumer Communications and Networking Conference, 2006. IEEE, New York.
66. Biondi P and Desclaux F 2006 Silver needle in the skype. BlackHat Europe.
67. Boer BD and Bosselaers A 1994 Collisions for the compression function of MD5. In Advances in Cryptology, Proceedings of EUROCRYPT '93, 293-304.
68. Bormann C, Burmeister C, Degermark M, Fukushima H, Hannu H, Jonsson LE, Hakenberg R, Koren T, Le K, Liu Z, Martensson A, Miyazaki A, Svanbro K, Wiebke T, Yoshimura T and Zheng H 2001 RObust Header Compression (ROHC): Framework and Four Profiles: RTP, UDP, ESP, and Uncompressed RFC 3095 (Proposed Standard). Updated by RFCs 3759, 4815.
69. Bormann C, Liu Z, Price R and Camarillo G 2007 Applying Signaling Compression (SigComp) to the Session Initiation Protocol (SIP) RFC 5049 (Proposed Standard).
70. Calhoun P, Loughney J, Guttman E, Zorn G and Arkko J 2003 Diameter Base Protocol RFC 3588 (Proposed Standard).
71. Calhoun P, Zorn G, Spence D and Mitton D 2005 Diameter Network Access Server Application RFC 4005 (Proposed Standard).
72. Camarillo G 2004 The Internet Assigned Number Authority (IANA) Uniform Resource Identifier (URI) Parameter Registry for the Session Initiation Protocol (SIP) RFC 3969 (Best Current Practice).
73. Camarillo G 2008 Message Body Handling in the Session Initiation Protocol (SIP). Internet Draft draft-ietf-sip-body-handling-03, Internet Engineering Task Force. Work in progress.
74. Camarillo G and Schulzrinne H 2004 Early Media and Ringing Tone Generation in the Session Initiation Protocol (SIP) RFC 3960 (Informational).
75. Camarillo G, Marshall W and Rosenberg J 2002 Integration of Resource Management and Session Initiation Protocol (SIP) RFC 3312 (Proposed Standard). Updated by RFCs 4032, 5027.
76. Campbell B, Rosenberg J, Schulzrinne H, Huitema C and Gurle D 2002 Session Initiation Protocol (SIP) Extension for Instant Messaging RFC 3428 (Proposed Standard).
77. Canavan J 2005 The evolution of IRC bots. Proceedings of Virus Bulletin Conference.
78. Carl G, Kesidis G, Brooks RR and Rai S 2006. Denial-of-service attack-detection techniques. IEEE Internet Computing 10(1), 82-89.
79. Carpenter B 2000 Internet Transparency RFC 2775 (Informational).
80. Carrara E, Lehtovirta V and Norrman K 2006 The Key ID Information Type for the General Extension Payload in Multimedia Internet KEYing (MIKEY) RFC 4563 (Proposed Standard).
81. Casson HN 1910 History of the Telephone. A. C. McClurg.
82. Clayton R 2006 The rising tide: DDOS from defective designs and defaults. SRUTI'06: Proceedings of the 2nd Conference on Steps to Reducing Unwanted Traffic on the Internet, 1. USENIX Association, Berkeley, CA.
83. Cohen D 1977 Specifications for the Network Voice Protocol (NVP) RFC 741.
84. Cohen D 1997 Issues in transnet packetized voice communications. Proceedings of the Fifth Data Communications Symposium (September), 6-13.
85. Cooper D, Santesson S, Farrell S, Boeyen S, Housley R and Polk W 2008 Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile RFC 5280 (Proposed Standard).
86. Cooper M, Dzambasow Y, Hesse P, Joseph S and Nicholas R 2005 Internet X.509 Public Key Infrastructure: Certification Path Building RFC 4158 (Informational).
87. Criscuolo PJ 2000 Distributed Denial of Service Trin00, Tribe Flood Network, Tribe Flood Network 2000 and Stacheldraht. UCRL-ID-136939, rev. 1, Department of Energy Computer Incident Advisory Capability (CIAC), Lawrence Livermore National Laboratory.
88. Cuervo F, Greene N, Rayhan A, Huitema C, Rosen B and Segers J 2000 Megaco Protocol Version 1.0 RFC 3015 (Proposed Standard). Obsoleted by RFC 3525.
89. DES 1999 FIPS 46-3: Data Encryption Standard (DES). Federal Information Processing Standards publication, NIST.
90. Dierks T and Allen C 1999 The TLS Protocol Version 1.0 RFC 2246 (Proposed Standard). Obsoleted by RFC 4346, updated by RFC 3546.
91. Dierks T and Rescorla E 2008 The Transport Layer Security (TLS) Protocol Version 1.2 RFC 5246 (Proposed Standard).
92. Dobbertin H 1996 Cryptanalysis of md5 compress. Rump Session of Eurocrypt.
93. Dotson S and Hoggan SC 2008 Proxy Mutual Authentication in SIP. Internet Draft draft-dotson-sipmutual- auth-02, Internet Engineering Task Force. Work in progress.
94. Douceur JR 2002 The sybil attack. IPTPS '01: Revised Papers from the First International Workshop on Peer-to-Peer Systems, 251-260. Springer, London.
95. Droms R 1993 Dynamic Host Configuration Protocol RFC 1531 (Proposed Standard). Obsoleted by RFC 1541.
96. Droms R 1997 Dynamic Host Configuration Protocol RFC 2131 (Draft Standard). Updated by RFCs 3396, 4361.
97. Droms R, Bound J, Volz B, Lemon T, Perkins C and Carney M 2003 Dynamic Host Configuration Protocol for IPv6 (DHCPv6) RFC 3315 (Proposed Standard). Updated by RFC 4361.
98. Dryburgh LS 2008 Interview with Jonathan Christensen (skype). Ecommedia Blog.
99. DSS 2000 FIPS 186-2: Digital Signature Standard (DSS). Federal Information Processing Standards publication, NIST.
100. Durham D, Boyle J, Cohen R, Herzog S, Rajan R and Sastry A 2000 The COPS (Common Open Policy Service) Protocol RFC 2748 (Proposed Standard). Updated by RFC 4261.
101. Dworkin M 2001 Recommendation for Block Cipher Modes of Operation Methods and Techniques. NIST special publication.
102. Dworkin M 2005 Recommendation for Block CipherModes of Operation: The CMAC Mode for Authentication. NIST special publication 800-38b draft.
103. E.164 ITR 2005 The international public telecommunication numbering plan. Technical report, ITU-T.
104. Eastlake III D 1997 Secure Domain Name System Dynamic Update RFC 2137 (Proposed Standard). Obsoleted by RFC 3007.
105. Eddy W 2007 TCP SYN Flooding Attacks and Common Mitigations RFC 4987 (Informational).
106. Ehlert S, Petgang S, Magedanz T and Sisalem D 2006 Analysis and signature of skype voip session traffic. Proceedings of the Fourth IASTED International Conference on Communications, Internet and Information Technology.
107. Elwell J 2007 Connected Identity in the Session Initiation Protocol (SIP) RFC 4916 (Proposed Standard).
108. Euchner M 2006 HMAC-Authenticated Diffie-Hellman for Multimedia Internet KEYing (MIKEY) RFC 4650 (Proposed Standard).
109. European Parliament 2002 Directive 2002/58/ec of the European Parliament and of the Council of 12 July 2002 Concerning the Processing of Personal Data and the Protection of Privacy in the Electronic Communications Sector (Directive on Privacy and Electronic Communications).
110. Faltstrom P and Mealling M 2004 The E.164 to Uniform Resource Identifiers (URI) Dynamic Delegation Discovery System (DDDS) Application (ENUM) RFC 3761 (Proposed Standard).
111. Federal Trade Commission 2004 The can-spam act: Requirements for commercial emailers.
112. Ferguson P and Senie D 1998 Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing RFC 2267 (Informational). Obsoleted by RFC 2827.
113. Fluhrer S, Mantin I and Shamir A 2001 Weaknesses in the key scheduling algorithm of rc4. Proceedings of the 4th Annual Workshop on Selected Areas of Cryptography.
114. Fogie S, Grossman J, Hansen R, Rager A and Petkov PD 2007 XSS Exploits: Cross Site Scripting Attacks and Defense. Syngress.
115. Fox B and Gleeson B 1999 Virtual Private Networks Identifier RFC 2685 (Proposed Standard).
116. Franks J, Hallam-Baker P, Hostetler J, Lawrence S, Leach P, Luotonen A and Stewart L 1999 HTTP Authentication: Basic and Digest Access Authentication RFC 2617 (Draft Standard).
117. Freed N and Borenstein N 1996 Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies RFC 2045 (Draft Standard). Updated by RFCs 2184, 2231, 5335.
118. Garcia-Martin M, Henrikson E and Mills D 2003 Private Header (P-Header) Extensions to the Session Initiation Protocol (SIP) for the 3rd-Generation Partnership Project (3GPP) RFC 3455 (Informational).
119. Garcia-Martin M, Belinchon M, Pallares-Lopez M, Canales-Valenzuela C and Tammi K 2006 Diameter Session Initiation Protocol (SIP) Application RFC 4740 (Proposed Standard).
120. Grizzard JB, Sharma V, Nunnery C, Kang BB and Dagon D 2007 Peer-to-peer botnets: overview and case study. HotBots'07: Proceedings of the First Workshop on Hot Topics in Understanding Botnets, 1. USENIX Association, Berkeley, CA.
121. Groff JR and Weinberg PN 1999 SQL: The Complete Reference. McGraw-Hill Professional, New York.
122. Guha S, Daswani N and Jain R 2008 An experimental study of the skype peer-to-peer VoIP system. Proceedings of The 5th International Workshop on Peer-to-Peer Systems, IPTP '08, Tampa Bay.
123. Gutmann P 2008 Key Management through Key Continuity (KCM). Internet Draft draftgutmann- keycont-01, Internet Engineering Task Force. Work in progress.
124. Handley M and Jacobson V 1998 SDP: Session Description Protocol RFC 2327 (Proposed Standard). Obsoleted by RFC 4566, updated by RFC 3266.
125. Handley M, Schulzrinne H, Schooler E and Rosenberg J 1999 SIP: Session Initiation Protocol RFC 2543 (Proposed Standard). Obsoleted by RFCs 3261, 3262, 3263, 3264, 3265.
126. Handley M, Jacobson V and Perkins C 2006 SDP: Session Description Protocol RFC 4566 (Proposed Standard).
127. Harkins D and Carrel D 1998 The Internet Key Exchange (IKE) RFC 2409 (Proposed Standard). Obsoleted by RFC 4306, updated by RFC 4109.
128. Hasebe M, Koshiko J, Suzuki Y, Yoshikawa T and Kyzivat P 2008 Example calls flows of race conditions in the Session Initiation Protocol (SIP). Internet Draft draft-ietf-sipping-race-examples-06, Internet Engineering Task Force. Work in progress.
129. Hautakorpi J, Ed. GC, Penfield R, Hawrylyshen A and Bhatia M 2008 Requirements from SIP (Session Initiation Protocol) Session Border Control Deployments. Internet Draft draft-ietf-sippingsbc- funcs-07, Internet Engineering Task Force. Work in progress.
130. Hawkes P, Paddon M and Rose GG 2004 Musings on the wang et al. md5 collision Cryptology ePrint Archive, Report 2004/264.
131. Hilt V, Widjaja I, Malas D and Schulzrinne H 2007 Session initiation protocol (sip) overload control. Internet Draft draft-hilt-sipping-overload-05, Internet Engineering Task Force. Work in progress.
132. Hladjk J 2005a Effective EU and US approached to spam? Moves towards a co-ordinated technical and legal response-part I. Communications Law 10(3), 71-83.
133. Hladjk J 2005b Effective EU and US approached to spam? Moves towards a co-ordinated technical and legal response-part II. Communications Law 10(4), 111-120.
134. Honeynet Project 2004 Know Your Enemy: Learning about Security Threats (2nd Edition). Addison-Wesley Professional, Reading, MA.
135. Housley R 2005 Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP) RFC 4309 (Proposed Standard).
136. Ignjatic D, Dondeti L, Audet F and Lin P 2006 MIKEY-RSA-R: An Additional Mode of Key Distribution in Multimedia Internet KEYing (MIKEY) RFC 4738 (Proposed Standard).
137. ITU-T Rec. H.248.1 2005 Gateway control protocol. ITU-T.
138. ITU-T Rec. E.164 2005 The international public telecommunication number plan. ITU-T.
139. ITU-T Rec. H.323 2006 Packet-based multimedia communicaton systems. ITU-T.
140. ITU-T Rec. Q.1912.5 2004. Interworking between session initiation protocol (SIP) and bearer independent call control protocol or ISDN user part. ITU-T.
141. ITU-T Rec. I.250 1995 ISDN user-network interface layer 3 specification for basic call control. Technical report, ITU-T.
142. ITU-T Rec. Q.1902.3 2003 Bearer independent call control protocol (Capability Set 2) and Signalling System No. 7 ISDN user part: Formats and codes. Technical report, ITU-T.
143. ITU-T Rec. Q.701 1993 Functional description of the message transfer part (MTP) of Signalling System No. 7. Technical report, ITU-T.
144. ITU-T Rec. Q.761 1999 Signalling System No. 7-ISDN User Part functional description. Technical report, ITU-T.
145. ITU-T Rec. Q.931 1998 Definition of Supplementary Services-Integrated Services Digital Network (ISDN)-General Structure and Service Capabilities. Technical report, ITU-T.
146. ITU-T Rec. X.680 2002 Abstract Syntax Notation One (ASN.1): Specification of basic notation. Technical report, ITU-T.
147. Jacobsson A and Carlsson B 2003 Privacy and spam: Empirical studies of unsolicited commercial e-mail. IFIP Workshop on Risks and Challenges of the Network Society, Karlstad, Sweden.
148. Jagatic TN, Johnson NA, Jakobsson M and Menczer F 2007. Social phishing. Commun. ACM 50(10), 94-100.
149. Jennings C 2007 Computational puzzles for SPAM reduction in SIP. Internet Draft, draft-jennings-sip-hashcash-06, Internet Engineering Task Force. Work in progress.
150. Jennings C and Mahy R 2008 Managing Client Initiated Connections in the Session Initiation Protocol (SIP). Internet Draft, draft-ietf-sip-outbound-15, Internet Engineering Task Force. Work in progress.
151. Jennings C, Peterson J and Watson M 2002 Private Extensions to the Session Initiation Protocol (SIP) for Asserted Identity within Trusted Networks RFC 3325 (Informational).
152. Jennings C, Fischl J and Tschofenig H 2007 Payment for services in session initiation protocol. Internet Draft, draft-jennings-sipping-pay-06, Internet Engineering Task Force. Work in progress.
153. Jonsson J and Kaliski B 2003 Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1 RFC 3447 (Informational).
154. Josefsson S 2006 The Base16, Base32, and Base64 Data Encodings RFC 4648 (Proposed Standard).
155. Jung J, Emil Sit HB and Morris R 2001 DNS performance and the effectiveness of caching Proceedings of the ACM SIGCOMM Internet Measurement Workshop '01, San Francisco, CA.
156. Kabel J 2003 Spam: A terminal threat to ISPS? the legal position of ISPS concerning their anti-spam policies in the EU after the Privacy & Telecom Directive. Computer Law Review International.
157. Kaminsky D 2006 Black OPS of TCP/IP 2005.5 ShmooCon, Washington, DC.
158. Kaminsky D 2008 It's the end of the cache as we know it. Or: 64k should be good enough for anyone. Blackhats, USA.
159. Kaplan H and Wing D 2008 The SIP Identity Baiting Attack. Internet Draft draft-kaplan-sip-baitingattack-02, Internet Engineering Task Force. Work in progress.
160. Karn P and Simpson W 1999 Photuris: Session-Key Management Protocol RFC 2522 (Experimental).
161. Kaufman C 2005 Internet Key Exchange (IKEv2) Protocol RFC 4306 (Proposed Standard). Updated by RFC 5282.
162. Kazatzopoulos L, Delakouridis K and Marias G 2008 Providing anonymity services in SIP. Workshop on VoIP Technology: Research and Standards for reliable applications. IEEE Computer Society, Cannes.
163. Kent S 2005a IP Authentication Header RFC 4302 (Proposed Standard).
164. Kent S 2005b IP Encapsulating Security Payload (ESP) RFC 4303 (Proposed Standard).
165. Kent S and Seo K 2005 Security Architecture for the Internet Protocol RFC 4301 (Proposed Standard).
166. Klensin J 2001 Simple Mail Transfer Protocol RFC 2821 (Proposed Standard). Obsoleted by RFC 5321, updated by RFC 5336.
167. Klima V 2006 Tunnels in hash functions: Md5 collisions within a minute. IACR Eprint Server.
168. Koren T, Casner S, Geevarghese J, Thompson B and Ruddy P 2003 Enhanced Compressed RTP (CRTP) for Links with High Delay, Packet Loss and Reordering RFC 3545 (Proposed Standard).
169. Kornblum JD 2006 Identifying almost identical files using context triggered piecewise hashing. Digital Investigation 3(Supplement 1), 91-97.
170. Krawczyk H, Bellare M and Canetti R 1997 HMAC: Keyed-Hashing for Message Authentication RFC 2104 (Informational).
171. Kristensen A 2003 JSR 116: SIP servelet API.
172. Lennox J 2006 Connection-oriented Media Transport over the Transport Layer Security (TLS) Protocol in the Session Description Protocol (SDP) RFC 4572 (Proposed Standard).
173. Lennox J, Schulzrinne H and Rosenberg J 2001 Common Gateway Interface for SIP RFC 3050 (Informational).
174. Lennox J, Wu X and Schulzrinne H 2004 Call Processing Language (CPL): A Language for User Control of Internet Telephony Services RFC 3880 (Proposed Standard).
175. Lerdorf RJ, Tatroe K, Kaehms B and McGredy R 2002 Programming PHP. O'Reilly & Associates, Sebastopol, CA.
176. Levine BN and Shields C 2002. Hordes: A Multicast Based Protocol for Anonymity. Journal of Computer Security 10(3), 213-240.
177. Li A 2007 RTP Payload Format for Generic Forward Error Correction RFC 5109 (Proposed Standard).
178. Liang J and Lai X 2007 Improved collision attack on hash function md5. Journal of Computer Science and Technology 22(1).
179. Ma M 2006. Tabu marking scheme to speedup IP traceback. Computer Networks 50(18), 3536-3549.
180. Mahajan R, Bellovin SM, Floyd S, Ioannidis J, Paxson V and Shenker S 2002. Controlling high bandwidth aggregates in the network. SIGCOMM Computer Communication Review 32(3), 62-73.
181. Mahy R, Gurbani V and Tate B 2008 Connection Reuse in the Session Initiation Protocol (SIP). Internet Draft draft-ietf-sip-connect-reuse-11, Internet Engineering Task Force. Work in progress.
182. Maiwald E 2003 Fundamentals of Network Security. McGraw-Hill Osborne Media, New York.
183. Maltz DA and Bhagwat P 1998 TCP splicing for application layer proxy performance. Research Report RC 21139, IBM.
184. Manral V 2007 Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH) RFC 4835 (Proposed Standard).
185. Marshall W 2003 Private Session Initiation Protocol (SIP) Extensions for Media Authorization RFC 3313 (Informational).
186. Marshall W et al. 2002 SIP extensions for network-asserted caller identity and privacy within trusted networks. Internet Draft, draft-ietf-sip-privacy-04, Internet Engineering Task Force. Work in progress.
187. Mayrhofer A and Hoeneisen B 2006 ENUM Validation Architecture RFC 4725 (Informational).
188. McClure S, Shah S and Shah S 2002 Web Hacking: Attacks and Defense, chapter 17. Addison-Wesley, Reading, MA.
189. McClure S, Scambray J and Kurtz G 2003a Hacking Exposed: Network Security Secrets and Solutions, Fourth Edition. McGraw-Hill, New York.
190. McClure S, Scambray J and Kurtz G 2003b Hacking Exposed: Network Security Secrets and Solutions, Fourth Edition. McGraw-Hill, New York.
191. McGrew DA 2001 The Truncated Multi-Modular Hash Function (TMMH). Internet Draft draftmcgrew- saag-tmmh-01, Internet Engineering Task Force. Expired.
192. McGrew DA and Fluhrer SR Datagram Transport Layer Security (DTLS) Extension to Establish Keys for Secure Real-time Transport Protocol (SRTP). Internet Draft draft-ietf-avt-dtls-srtp-05, Internet Engineering Task Force. Work in progress.
193. McGrew DA and Fluhrer 2000 Attacks on additive encryption of redundant plaintext and implications on internet security. Proceedings of the 7th Annual International Workshop on Selected Areas in Cryptography, pp. 14-28. Springer, London.
194. McKinney EH 1966. Generalized birthday problem. American Mathematical Monthly 73, 385-387.
195. Mealling M and Daniel R 2000 The Naming Authority Pointer (NAPTR) DNS Resource Record RFC 2915 (Proposed Standard). Obsoleted by RFCs 3401, 3402, 3403, 3404.
196. Menezes AJ, van Oorschot PC and Vanstone SA 1996 Handbook of Applied Cryptography. CRC Press, Boca Raton, FL.
197. Miller BP, Fredriksen L and So B 1990. An empirical study of the reliability of unix utilities. Communications of the ACM 33(12), 32-44.
198. Mills D 1992 Network Time Protocol (Version 3) Specification, Implementation and Analysis RFC 1305 (Draft Standard).
199. minisip n.d. http://www.minisip.org. Technical report.
200. Mirkovic J, Martin J and Reiher P 2004. A taxonomy of DDOS attacks and DDOS defense mechanisms. ACM SIGCOMM Computer Communication Review 34(2), 39-53.
201. Mockapetris P 1987 Domain Names-Implementation and Specification RFC 1035 (Standard). Updated by RFCs 1101, 1183, 1348, 1876, 1982, 1995, 1996, 2065, 2136, 2181, 2137, 2308, 2535, 2845, 3425, 3658, 4033, 4034, 4035, 4343.
202. Mockapetris P 1989 DNS Encoding of Network Names and Other Types RFC 1101.
203. Moore D, Voelker GM and Savage S 2001 Inferring internet denial-of-service activity. SSYM'01:Proceedings of the 10th Conference on USENIX Security Symposium, 2. USENIX Association, Berkeley, CA.
204. Nakhjiri M, Chowdhury K, Lior A and Leung K 2007 Mobile IPv4 RADIUS Requirements RFC 5030 (Informational).
205. Niemi A, Arkko J and Torvinen V 2002 Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA) RFC 3310 (Informational).
206. NIST 2002 Secure Hash Standard. National Institute of Standards and Technology, Washington, DC. Federal Information Processing Standard 180-2.
207. Noldus R 2006 CAMEL: Intelligent Networks for the GSM, GPRS and UMTS Network. John Wiley & Sons, Chichester.
208. Nourse A, Liu X, Vilhuber J and Madson C 2008 Cisco Systems: Simple Certificate Enrollment Protocol. Internet Draft draft-nourse-scep-17, Internet Engineering Task Force. Work in progress.
209. Ohta M 2004 Simulation study of SIP signaling in an overload condition. In Communications, Internet, and Information Technology (ed. Hamza MH), 321-326. IASTED/ACTA Press.
210. Oikarinen J and Reed D 1993 Internet Relay Chat Protocol RFC 1459 (Experimental). Updated by RFCs 2810, 2811, 2812, 2813.
211. Ong L, Rytina I, Garcia M, Schwarzbauer H, Coene L, Lin H, Juhasz I, Holdrege M and Sharp C 1999 Framework Architecture for Signaling Transport RFC 2719 (Informational).
212. Oxford 2005 Compact Oxford English Dictionary of Current English, Third Edition. Oxford University Press, Oxford.
213. Pelinescu-onciul A, Janak J and Kuthan J 2003 SIP express router (SER). IEEE Network 17(4), 9.
214. Perkins C and Westerland M 2007 Multiplexing RTP Data and Control Packets on a Single Port. Internet Draft draft-ietf-avt-rtp-and-rtcp-mux-07, Internet Engineering Task Force. Work in progress.
215. Perkins C, Kouvelas I, Hodson O, Hardman V, Handley M, Bolot J, Vega-Garcia A and Fosse-Parisis S 1997 RTP Payload for Redundant Audio Data RFC 2198 (Proposed Standard).
216. Peterson J 2002 A Privacy Mechanism for the Session Initiation Protocol (SIP) RFC 3323 (Proposed Standard).
217. Peterson J and Jennings C 2006 Enhancements for Authenticated Identity Management in the Session Initiation Protocol (SIP) RFC 4474 (Proposed Standard).
218. Peterson J, Liu H, Yu J and Campbell B 2004 Using E.164 numbers with the Session Initiation Protocol (SIP) RFC 3824 (Informational).
219. Peterson J, Polk J, Sicker D and Tschofenig H 2006 Trait-Based Authorization Requirements for the Session Initiation Protocol (SIP) RFC 4484 (Informational).
220. Postel J 1980 User Datagram Protocol RFC 768 (Standard).
221. Postel J 1981a Internet Control Message Protocol RFC 792 (Standard). Updated by RFCs 950, 4884.
222. Postel J 1981b Internet Protocol RFC 791 (Standard). Updated by RFC 1349.
223. Postel J 1981c Transmission Control Protocol RFC 793 (standard). Updated by RFC 3168.
224. Price R, Bormann C, Christoffersson J, Hannu H, Liu Z and Rosenberg J 2003 Signaling Compression (SigComp) RFC 3320 (Proposed Standard). Updated by RFC 4896.
225. Puthenkulam J, Lortz V, Palekar A and Simon D 2003 The Compound Authentication Binding Problem. Internet draft, draft-puthenkulam-eap-binding-04, IETF. Expired.
226. Rajab MA, Zarfoss J, Monrose F and Terzis A 2007 My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging. HotBots'07: Proceedings of the First Workshop on Hot Topics in Understanding Botnets, 5. USENIX Association, Berkeley, CA.
227. Ramsdell B 1999 S/MIME Version 3 Message Specification RFC 2633 (Proposed Standard). Obsoleted by RFC 3851.
228. Ramsdell B 2004 Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Message Specification RFC 3851 (Proposed Standard).
229. Reiter M and Rubin A 1998. Crowds: Anonymity for web transactions. ACM Transactions on Information and System Security 1(1), 66-92.
230. Rescorla E 1999 Diffie-Hellman Key Agreement Method RFC 2631 (Proposed Standard).
231. Rescorla E 2008 Keying Material Extractors for Transport Layer Security (TLS). Internet Draft draft-ietf-tls-extractor-02, Internet Engineering Task Force. Work in progress.
232. Rescorla E and Modadugu N 2006 Datagram Transport Layer Security RFC 4347 (Proposed Standard).
233. Resnick P, Kuwabara K, Zeckhauser R and Friedman E 2000. Reputation systems. Communications of the ACM 43(12), 45-48.
234. Richardson R 2007 2007 CSI Computer Crime and Security Survey. Technical report, Computer Security Institute.
235. Rigney C, Rubens A, Simpson W and Willens S 1997 Remote Authentication Dial In User Service (RADIUS) RFC 2058 (Proposed Standard). Obsoleted by RFC 2138.
236. Rivest R 1992 The MD5 Message-Digest Algorithm RFC 1321 (Informational).
237. Roach AB 2002 Session Initiation Protocol (SIP)-Specific Event Notification RFC 3265 (Proposed Standard).
238. Roback E and Dworkin M 1999. Conference report-first advanced encryption standard (AES) candidate conference, Ventura, CA, August 20-22, 1998. Journal of Research of the National Institute of Standards and Technology 104(1), 97-105.
239. Rosenberg J 2002 The Session Initiation Protocol (SIP) UPDATE Method RFC 3311 (Proposed Standard).
240. Rosenberg J 2004a A Presence Event Package for the Session Initiation Protocol (SIP) RFC 3856 (Proposed Standard).
241. Rosenberg J 2004b A Session Initiation Protocol (SIP) Event Package for Registrations RFC 3680 (Proposed Standard).
242. Rosenberg J 2006 Requirements for management of overload in the session initiation protocol. RFC 5390 (Informational).
243. Rosenberg J 2007 Interactive connectivity establishment (ICE): a methodology for network address translator (NAT) traversal for the session initiation protocol (SIP). Internet Draft draft-ietf-mmusic-ice-19, Internet Engineering Task Force. Work in progress.
244. Rosenberg J and Jennings C 2008 The Session Initiation Protocol (SIP) and Spam RFC 5039 (Informational).
245. Rosenberg J and Schulzrinne H 2002a An Offer/Answer Model with Session Description Protocol (SDP) RFC 3264 (Proposed Standard).
246. Rosenberg J and Schulzrinne H 2002b Reliability of Provisional Responses in Session Initiation Protocol (SIP) RFC 3262 (Proposed Standard).
247. Rosenberg J and Schulzrinne H 2002c Session Initiation Protocol (SIP): Locating SIP Servers RFC 3263 (Proposed Standard).
248. Rosenberg J and Schulzrinne H 2003 An Extension to the Session Initiation Protocol (SIP) for Symmetric Response Routing RFC3581 (Proposed Standard).
249. Rosenberg J and Schulzrinne H 2005 Architecture and Design Principles of the Session Initiation Protocol. Internet draft, draft-rosenberg-sipping-sip-arch-00. IETF. Expired.
250. Rosenberg J, Salama H and Squire M 2002a Telephony Routing over IP (TRIP) RFC 3219 (Proposed Standard).
251. Rosenberg J, Schulzrinne H, Camarillo G, Johnston A, Peterson J, Sparks R, Handley M and Schooler E 2002b SIP: Session Initiation Protocol RFC 3261 (Proposed Standard). Updated by RFCs 3265, 3853, 4320, 4916.
252. Rosenberg J, Weinberger J, Huitema C and Mahy R 2003 STUN-Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATs) RFC 3489 (Proposed Standard).
253. Rosenberg J, Peterson J, Schulzrinne H and Camarillo G 2004 Best Current Practices for Third Party Call Control (3PCC) in the Session Initiation Protocol (SIP) RFC 3725 (Best Current Practice).
254. Rosenberg J, Schulzrinne H and Camarillo G 2005 The Stream Control Transmission Protocol (SCTP) as a Transport for the Session Initiation Protocol (SIP) RFC 4168 (Proposed Standard).
255. Rosenberg J, Boulton C, Camarillo G and Audet F 2008a Best current practices for NAT traversal for client-server SIP. Internet Draft, draft-ietf-sipping-nat-scenarios-09. IETF. Work in progress.
256. Rosenberg J, Mahy R, Matthews P and Wing D 2008b Session traversal utilities for (NAT) (STUN). Internet draft, draft-ietf-behave-rfc3489bis-18. IETF. Work in Progress.
257. Rosenberg J, Mahy R, and Matthews P 2008c Traversal using relays around NAT (TURN): Relay extensions to session traversal utilities for NAT (STUN). Internet Draft draft-ietf-behave-turn-12, Internet Engineering Task Force. Work in progress.
258. Russell T 1995 Signaling System #7. McGraw-Hill, New York.
259. Sahami M, Dumais S, Heckerman D and Horvitz E 1998 A bayesian approach to filtering junk E-mail. AAAI Workshop on Learning for Text Categorization. AAAI Technical Report WS-98-05.
260. Saltzer J, Reed D Clark D 1984 End-to-end arguments in system design.
261. Savage S, Wetherall D, Karlin A and Anderson T 2001. Network support for IP traceback. IEEE/ACM Transactions Networks 9(3), 226-237.
262. Schaad J 2005 Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF) RFC 4211 (Proposed Standard).
263. Schaad J and Myers M 2008 Certificate Management over CMS (CMC): Transport Protocols RFC 5273 (Proposed Standard).
264. Schneier B 1996 Applied Cryptography. John Wiley & Sons, New York.
265. Schulzrinne H 2002 Dynamic Host Configuration Protocol (DHCP-for-IPv4) Option for Session Initiation Protocol (SIP) Servers RFC 3361 (Proposed Standard).
266. Schulzrinne H 2004 The tel URI for Telephone Numbers RFC 3966 (Proposed Standard). Updated by RFC 5341.
267. Schulzrinne H and Volz B 2003 Dynamic Host Configuration Protocol (DHCPv6) Options for Session Initiation Protocol (SIP) Servers RFC 3319 (Proposed Standard).
268. Schulzrinne H, Casner S, Frederick R and Jacobson V 1996 RTP: A Transport Protocol for Real-Time Applications RFC 1889 (Proposed Standard). Obsoleted by RFC 3550.
269. Schulzrinne H, Rao A and Lanphier R 1998 Real Time Streaming Protocol (RTSP) RFC 2326 (Proposed Standard).
270. Schulzrinne H, Casner S, Frederick R and Jacobson V 2003 RTP: A Transport Protocol for Real-Time Applications RFC 3550 (Standard).
271. Sengar H, Wijesekera D, Wang H and Jajodia S 2006 Voip intrusion detection through interacting protocol state machines. DSN '06: Proceedings of the International Conference on Dependable Systems and Networks (DSN'06), 393-402. IEEE Computer Society, Washington, DC.
272. Senie D 1999 Changing the Default for Directed Broadcasts in Routers RFC 2644 (Best Current Practice).
273. Shacham A, Monsour B, Pereira R and Thomas M 2001 IP Payload Compression Protocol (IPComp) RFC 3173 (Proposed Standard).
274. Shen C and Schulzrinne H 2008 SIP server overload control: Design and evaluation. Principles, Systems and Applications of IP Telecommunications. Services and Security for Next Generation Networks Second International Conference, IPTComm 2008. Springer, London.
275. SHS 2007 FIPS 180-3: Secure Hash Standard (SHS). Federal Information Processing Standards publication, NIST.
276. SIPit n.d. http://bugs.sipit.net/. Technical report.
277. Sisalem D and Floroiu J 2009 Protecting VoIP services against DoS using overload control. NorSec 2008. Technical University of Denmark, Coperhagen.
278. Sisalem D and Kuthan J 2004 Inter-domain authentication and authorization mechanisms for roaming sip users. In Wireless Information Systems (ed. Mahmoud QH and Weghorn H), 89-99. INSTICC Press.
279. Snoeren AC 2001. Hash-based IP traceback. SIGCOMM Computer Communication Review 31(4), 3-14.
280. Song DX and Perrig A 2001 Advanced and authenticated marking schemes for IP traceback. INFOCOM, 878-886.
281. Sparks R, Lawrence S, Hawrylyshen A and Campen B 2007 Addressing an amplification vulnerability in session initiation protocol (SIP) forking proxies. Internet Draft draft-ietf-sip-fork-loop-fix-7, Internet Engineering Task Force. Work in progress.
282. Stewart R 2007 Stream Control Transmission Protocol RFC 4960 (Proposed Standard).
283. Stone J, Stewart R and Otis D 2002 Stream Control Transmission Protocol (SCTP) Checksum Change RFC 3309 (Proposed Standard). Obsoleted by RFC 4960.
284. Terry DB, Painter M, Riggle DW and Zhou S 1984 The Berkeley Internet Name Domain Server. Technical Report UCB/CSD-84-182, EECS Department, University of California, Berkeley.
285. Tschofenig H, Hodges J, Peterson J, Polk J and Sicker D 2008 SIP SAML Profile and Binding. Internet Draft draft-ietf-sip-saml-04, Internet Engineering Task Force. Work in progress.
286. Tsirtsis G and Srisuresh P 2000 Network Address Translation-Protocol Translation (NAT-PT) RFC 2766 (Historic). Obsoleted by RFC 4966, updated by RFC 3152.
287. Turing AM 1950. Computing machinery and intelligence. MIND: A Quarterly Review of Pyschology and Philosophy 59(236), 433-460.
288. Vemuri A and Peterson J 2002 Session Initiation Protocol for Telephones (SIP-T): Context and Architectures RFC 3372 (Best Current Practice).
289. VoIPSA 2005. VoIP security and privacy threat taxonomy. Report 1.0. von Ahn L, Blum M and Langford J 2004 Telling humans and computers apart automatically. Communications of the ACM 47(2), 56-60.
290. Wald A 1947 Sequential Analysis. John Wiley & Sons, New York.
291. Wang H, Zhang D and Shin KG 2002 Detecting syn flooding attacks INFOCOM, 3, 1530-1539.
292. Wang X and Yu H 2005a How to break md5 and other hash functions In EUROCRYPT (ed. Cramer R), vol. 3494 of Lecture Notes in Computer Science, 19-35. Springer, London.
293. Wang X and Yu H 2005b How to break MD5 and other hash functions. Advances in Cryptology-EUROCRYPT 2005, 19-35. Lecture Notes in Computer Science, Vol. 3494. Springer, London.
294. Westin AF 1970 Privacy and Freedom. Atheneum, New York.
295. Willis D and Hoeneisen B 2002 Session Initiation Protocol (SIP) Extension Header Field for Registering Non-Adjacent Contacts RFC 3327 (Proposed Standard).
296. Willis D and Hoeneisen B 2003 Session Initiation Protocol (SIP) Extension Header Field for Service Route Discovery During Registration RFC 3608 (Proposed Standard).
297. Wing D 2007 Symmetric RTP/RTP Control Protocol (RTCP) RFC 4961 (Best Current Practice).
298. Wing D 2008 DTLS-SRTP Key Transport. Internet Draft draft-wing-avt-dtls-srtp-key-transport-02, Internet Engineering Task Force. Work in progress.
299. Wing D and Kaplan H 2008 SIP Identity using Media Path. Internet Draft draft-wing-sipidentity- media-02, Internet Engineering Task Force. Work in progress.
300. Wing D, Fries S, Tschofenig H and Audet F 2008 Requirements and Analysis of Media Security Management Protocols. Internet Draft draft-ietf-sip-media-security-requirements-07, Internet Engineering Task Force. Work in progress.
301. Wired 2000 Yahoo on trail of site hackers. Wired.com February.
302. Wolfe P, Scott C and Erwin M 2004 Anti-Spam Tool Kit. McGraw-Hill Osborne Media, New York.
303. X.509 1997 ISO/IEC 9594-8/ITU-T Recommendation X.509, "Information Technology-Open Systems Interconnection: The Directory: Authentication Framework". Technical report, ITU-T.
304. Yergeau F 1998 UTF-8, a transformation format of ISO 10646 RFC 2279 (Draft Standard). Obsoleted by RFC 3629.
305. Zeilenga K 2006 Lightweight Directory Access Protocol (LDAP) Schema Definitions for X.509 Certificates RFC 4523 (Proposed Standard).
306. Zfone n.d. http://www.zfoneproject.com. Technical report.
307. Zhang G, Ehlert S, Magedanz T and Sisalem D 2007 Denial of service attack and prevention on SIP VoIP infrastructures using DNS flooding. IPTComm '07: Proceedings of the 1st International Conference on Principles, Systems and Applications of IP Telecommunications, 57-66. ACM, New York.
308. Zimmerer E, Peterson J, Vemuri A, Ong L, Audet F, Watson M and Zonoun M 2001 MIME media types for ISUP and QSIG Objects RFC 3204 (Proposed Standard). Updated by RFC 3459.
309. Zimmermann P, Johnston A and Callas J 2008 ZRTP: Media Path Key Agreement for Secure RTP. Internet Draft draft-zimmermann-avt-zrtp-09, Internet Engineering Task Force. Work in progress.