Specification-Based Denial-of-Service Detection for SIP Voice-over-IP Networks

Authors:
Sven Ehlert;Chengjian Wang;Thomas Magedanz;Dorgham Sisalem
Affiliations:
-;-;-;-
Venue:
ICIMP '08 Proceedings of the 2008 The Third International Conference on Internet Monitoring and Protection
Year:
2008

Citing 0
Cited 4

Sketch-based SIP flooding detection using Hellinger distance

GLOBECOM'09 Proceedings of the 28th IEEE conference on Global telecommunications
VoIP malware: attack tool & attack scenarios

ICC'09 Proceedings of the 2009 IEEE international conference on Communications
Labeled VoIP data-set for intrusion detection evaluation

EUNICE'10 Proceedings of the 16th EUNICE/IFIP WG 6.6 conference on Networked services and applications: engineering, control and management
Characteristics of real open SIP-Server traffic

PAM'13 Proceedings of the 14th international conference on Passive and Active Measurement

Quantified Score

Hi-index	0.00

Visualization

Abstract

Security threats for Voice-over IP (VoIP) networks are becoming a major concern as its popularity increases. New attacks are developed that target directly the underlying SIP protocol. To detect such kinds of attacks we present a specification-based detection framework to recognise deviation from its expected behaviour. We present an implementation and show with measurements that this method is capable of attack detection and mitigation for different kinds of attacks directed towards a SIP infrastructure, including Denial-of-Service message flooding.