Incorporating Active Fingerprinting into SPIT Prevention Systems
Incorporating Active Fingerprinting into SPIT Prevention Systems
复制标题
将主动指纹识别纳入 SPIT 预防系统
DOI：
--
复制
发表时间：
2006
期刊：
影响因子：
--
通讯作者：
D. Saha
中科院分区：
文献类型：
--
作者：
Hong Yan;K. Sripanidkulchai;Hui Zhang;Zon;D. Saha
IP语音（VoIP）的使用正在以天文数字的速度增长。虽然部署的经济利益是显而易见的，但对可能滥用该技术的担忧可能会阻碍其部署。新兴的安全威胁，如垃圾邮件通过互联网电话（SPIT）是不远的现实和技术，以检测和防止SPIT正在进行的研究领域。在本文中，我们设计并实现了一个防火墙来检测SPIT的VoIP设备，使用会话发起协议（SIP），这是越来越多的势头作为事实上的信令协议。对于SPIT检测，我们使用指纹技术，在远程软件代理上运行协议分析来识别VoIP设备。我们建立和评估一个原型SPIT预防防火墙，利用指纹信息来识别可疑的用户代理的呼叫邀请。我们证明，指纹识别产生的开销低，是足够有效的，被纳入SPIT预防系统。
Voice over IP (VoIP) usage is growing at an astronomical rate. While the economic benefits of deployment are clear, concerns of potential abuse of the technology may hinder its deployment. Emerging security threats such as Spam over Internet Telephony (SPIT) are not far from reality and techniques to detect and prevent SPIT are ongoing research areas. In this paper, we design and implement a firewall to detect SPIT for VoIP devices that use the Session Initiation Protocol (SIP) which is gaining momentum as the de facto signaling protocol. For SPIT detection, we use fingerprinting techniques that run protocol analysis on the remote software agent to identify VoIP devices. We build and evaluate a prototype SPIT prevention firewall that leverages fingerprint information to identify call invitations from suspicious user agents. We demonstrate that fingerprinting incurs low overhead and is efficient enough to be incorporated into SPIT prevention systems.