An Efficient Intrusion Detection and Prevention System against SIP Malformed Messages Attacks

Author

Li, Hongbin ; Lin, Hu ; Hou, Huichao ; Yang, Xuehua

Author_Institution

Shenyang Inst. of Comput. Technol., Grad. Sch. of the Chinese Acad. of Sci., Beijing, China

fYear

2010

fDate

26-28 Sept. 2010

Firstpage

69

Lastpage

73

Abstract

SIP malformed messages detection and prevention has become an important indicator of high availability for SIP servers or IMS system. This paper describes the SIP malformed messages attacks, analyses sip protocol features and builds an abstract data model according to RFC 3261 protocol specification. The author presents an efficient intrusion detection and prevention system against SIP malformed messages attacks. Using Hybrid detection techniques, the paper increases detection accuracy against SIP malformed message attacks and implements a detection algorithm in the kernel layer which improves the performance of the system.

Keywords

message authentication; signalling protocols; telecommunication security; IMS system; RFC 3261 protocol specification; SIP malformed message attack; SIP malformed message detection; SIP malformed message prevention; SIP protocol; SIP server; abstract data model; intrusion detection; prevention system; Bridges; Data models; Feature extraction; Intrusion detection; Kernel; Protocols; SIP; data model; detection and prevention; malformed messages; protocol features;

fLanguage

English

Publisher

ieee

Conference_Titel

Computational Aspects of Social Networks (CASoN), 2010 International Conference on

Conference_Location

Taiyuan

Print_ISBN

978-1-4244-8785-1

Type

conf

DOI

10.1109/CASoN.2010.23

Filename

5636795