Intrusion Detection System for Denial-of-Service flooding attacks in SIP communication networks
Intrusion Detection System for Denial-of-Service flooding attacks in SIP communication networks
复制标题
DOI：
10.1504/ijsn.2009.027344
复制
发表时间：
2009-07
期刊：
影响因子：
--
通讯作者：
S. Ehlert;Y. Rebahi;T. Magedanz
中科院分区：
文献类型：
--
作者：
S. Ehlert;Y. Rebahi;T. Magedanz
随着IP语音（VoIP）或IP多媒体子系统（IMS）网络的普及，其安全威胁正成为主要关注点。正在开发直接针对底层SIP协议的新攻击。为了检测这种攻击，我们提出了一个基于规范的入侵检测系统（IDS），以识别偏离其预期的协议行为。我们将提出一个实施方案，并显示与测量，这种方法是能够攻击检测和缓解不同种类的攻击针对SIP基础设施，重点是拒绝服务（DoS）消息泛滥。
Security threats to Voice-over IP (VoIP) or IP Multimedia Subsystem (IMS) networks are becoming a major concern as their popularity increases. New attacks are being developed that directly target the underlying SIP protocol. To detect such kinds of attacks we are presenting a specification-based Intrusion Detection System (IDS) to recognise deviation from its expected protocol behaviour. We will present an implementation and show with measurements that this method is capable of attack detection and mitigation for different kinds of attacks directed towards a SIP infrastructure, with a focus on Denial-of-Service (DoS) message flooding.