A framework for protecting a SIP-based infrastructure against malformed message attacks

Authors:
Dimitris Geneiatakis;Georgios Kambourakis;Costas Lambrinoudakis;Tasos Dagiuklas;Stefanos Gritzalis
Affiliations:
Laboratory of Information and Communication Systems Security, Department of Information and Communication Systems Engineering, University of the Aegean, Karlovassi, GR-83200 Samos, Greece;Laboratory of Information and Communication Systems Security, Department of Information and Communication Systems Engineering, University of the Aegean, Karlovassi, GR-83200 Samos, Greece;Laboratory of Information and Communication Systems Security, Department of Information and Communication Systems Engineering, University of the Aegean, Karlovassi, GR-83200 Samos, Greece;Laboratory of Information and Communication Systems Security, Department of Information and Communication Systems Engineering, University of the Aegean, Karlovassi, GR-83200 Samos, Greece;Laboratory of Information and Communication Systems Security, Department of Information and Communication Systems Engineering, University of the Aegean, Karlovassi, GR-83200 Samos, Greece
Venue:
Computer Networks: The International Journal of Computer and Telecommunications Networking
Year:
2007

Citing 1
Cited 6

Abstracting application-level web security

Proceedings of the 11th international conference on World Wide Web

An ontology description for SIP security flaws

Computer Communications
A Self-learning System for Detection of Anomalous SIP Messages

Principles, Systems and Applications of IP Telecommunications. Services and Security for Next Generation Networks
A framework for identity privacy in SIP

Journal of Network and Computer Applications
Design and analysis of SIP-based mobile VPN for real-time applications

IEEE Transactions on Wireless Communications
A first order logic security verification model for SIP

ICC'09 Proceedings of the 2009 IEEE international conference on Communications
PrivaSIP: Ad-hoc identity privacy in SIP

Computer Standards & Interfaces

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents a framework that can be utilized for the protection of session initiation protocol (SIP)-based infrastructures from malformed message attacks. Its main characteristic is that it is lightweight and that it can be easily adapted to heterogeneous SIP implementations. The paper analyzes several real-life attacks on VoIP services and proposes a novel detection and protection mechanism that is validated through an experimental test-bed under different test scenarios. Furthermore, it is demonstrated that the employment of such a mechanism for the detection of malformed messages imposes negligible overheads in terms of the overall SIP system performance.