Denial of service attack and prevention on SIP VoIP infrastructures using DNS flooding

  • Authors:
  • Ge Zhang;Sven Ehlert;Thomas Magedanz;Dorgham Sisalem

  • Affiliations:
  • Fraunhofer Institute FOKUS, Berlin, Germany;Fraunhofer Institute FOKUS, Berlin, Germany;Fraunhofer Institute FOKUS, Berlin, Germany;Tekelec, Berlin, Germany

  • Venue:
  • Proceedings of the 1st international conference on Principles, systems and applications of IP telecommunications
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

A simple yet effective Denial of Service (DoS) attack on SIP servers is to flood the server with requests addressed at irresolvable domain names. In this paper we evaluate different possibilities to mitigate these effects and show that over-provisioning is not sufficient to handle such attacks. As a more effective approach we present a solution called the DNS Attack Detection and Prevention (DADP) scheme based on the usage of a non-blocking DNS cache. Based on various measurement conducted over the Internet we investigate the efficiency of the DADP scheme and compare its performance with different caching strategies applied.