A Collaborative Forensics Framework for VoIP Services in Multi-network Environments

Authors:
Hsien-Ming Hsu;Yeali S. Sun;Meng Chang Chen
Affiliations:
Dept. of Information Management, National Taiwan University, Taipei, Taiwan;Dept. of Information Management, National Taiwan University, Taipei, Taiwan;Institute of Information Science, Academia Sinica, Taipei, Taiwan
Venue:
PAISI, PACCF and SOCO '08 Proceedings of the IEEE ISI 2008 PAISI, PACCF, and SOCO international workshops on Intelligence and Security Informatics
Year:
2008

Citing 6
Cited 1

Homeland Security Techniques and Technologies (Networking Series)

Homeland Security Techniques and Technologies (Networking Series)
SCIDIVE: A Stateful and Cross Protocol Intrusion Detection Architecture for Voice-over-IP Environments

DSN '04 Proceedings of the 2004 International Conference on Dependable Systems and Networks
Tracking anonymous peer-to-peer VoIP calls on the internet

Proceedings of the 12th ACM conference on Computer and communications security
VoIP Intrusion Detection Through Interacting Protocol State Machines

DSN '06 Proceedings of the International Conference on Dependable Systems and Networks
IP Location

IP Location
Monitoring Architecture for Lawful Interception in VoIP Networks

ICIMP '07 Proceedings of the Second International Conference on Internet Monitoring and Protection

Collaborative scheme for VoIP traceback

Digital Investigation: The International Journal of Digital Forensics & Incident Response

Quantified Score

Hi-index	0.00

Visualization

Abstract

We propose a collaborative forensics framework to trace back callers of VoIP services in a multi-network environment. The paper is divided into two parts. The first part discusses the critical components of SIP-based telephony and determines the information needed for traceback in single and multiple Autonomous Systems (ASs). The second part proposes the framework and the entities of collaborative forensics. We also propose an algorithm for merging collected data. The mechanism used to execute collaborative forensics with cooperating units is presented and the procedures used in the collaborative architecture are described. For every entity, we suggest some interesting topics for research.