DocumentCode
2027759
Title
Detecting DoS attacks on SIP systems
Author
Chen, Eric Y.
Author_Institution
NTT Inf. Sharing Platform Lab., NTT Corp., Tokyo, Japan
fYear
2006
fDate
38810
Firstpage
53
Lastpage
58
Abstract
As VoIP technology becomes more widely deployed due to its economical advantage over traditional PSTN services, VoIP servers and clients will become attractive targets of denial of service (DoS) attacks. This paper proposes a method to detect DoS attacks that involve flooding SIP entities with illegitimate SIP messages. We modify the original finite-state machines for SIP transactions in such a way that transaction anomalies can be detected in a stateful manner. We also propose to use four threshold parameters to confirm an attack.
Keywords
Internet telephony; client-server systems; protocols; quality of service; telecommunication security; DoS; SIP; VoIP technology; client-server system; denial of service attack; session initiation protocol; transaction anomaly; Bandwidth; Computer crashes; Computer crime; Floods; Laboratories; Microprogramming; Network servers; Reflection; Web and internet services; Web server;
fLanguage
English
Publisher
ieee
Conference_Titel
VoIP Management and Security, 2006. 1st IEEE Workshop on
Print_ISBN
1-4244-0144-5
Type
conf
DOI
10.1109/VOIPMS.2006.1638123
Filename
1638123
Link To Document