TY - JOUR
T1 - A framework for protecting a SIP-based infrastructure against malformed message attacks
AU - Geneiatakis, Dimitris
AU - Kambourakis, Georgios
AU - Lambrinoudakis, Costas
AU - Dagiuklas, Tasos
AU - Gritzalis, Stefanos
PY - 2007/7/11
Y1 - 2007/7/11
N2 - This paper presents a framework that can be utilized for the protection of session initiation protocol (SIP)-based infrastructures from malformed message attacks. Its main characteristic is that it is lightweight and that it can be easily adapted to heterogeneous SIP implementations. The paper analyzes several real-life attacks on VoIP services and proposes a novel detection and protection mechanism that is validated through an experimental test-bed under different test scenarios. Furthermore, it is demonstrated that the employment of such a mechanism for the detection of malformed messages imposes negligible overheads in terms of the overall SIP system performance.
AB - This paper presents a framework that can be utilized for the protection of session initiation protocol (SIP)-based infrastructures from malformed message attacks. Its main characteristic is that it is lightweight and that it can be easily adapted to heterogeneous SIP implementations. The paper analyzes several real-life attacks on VoIP services and proposes a novel detection and protection mechanism that is validated through an experimental test-bed under different test scenarios. Furthermore, it is demonstrated that the employment of such a mechanism for the detection of malformed messages imposes negligible overheads in terms of the overall SIP system performance.
KW - Intrusion detection system
KW - Malformed message attacks
KW - Session initiation protocol
KW - Voice over IP security
UR - http://www.scopus.com/inward/record.url?scp=33947123970&partnerID=8YFLogxK
U2 - 10.1016/j.comnet.2006.11.014
DO - 10.1016/j.comnet.2006.11.014
M3 - Article
AN - SCOPUS:33947123970
SN - 1389-1286
VL - 51
SP - 2580
EP - 2593
JO - Computer Networks
JF - Computer Networks
IS - 10
ER -