Title :
An Efficient Intrusion Detection and Prevention System against SIP Malformed Messages Attacks
Author :
Li, Hongbin ; Lin, Hu ; Hou, Huichao ; Yang, Xuehua
Author_Institution :
Shenyang Inst. of Comput. Technol., Grad. Sch. of the Chinese Acad. of Sci., Beijing, China
Abstract :
SIP malformed messages detection and prevention has become an important indicator of high availability for SIP servers or IMS system. This paper describes the SIP malformed messages attacks, analyses sip protocol features and builds an abstract data model according to RFC 3261 protocol specification. The author presents an efficient intrusion detection and prevention system against SIP malformed messages attacks. Using Hybrid detection techniques, the paper increases detection accuracy against SIP malformed message attacks and implements a detection algorithm in the kernel layer which improves the performance of the system.
Keywords :
message authentication; signalling protocols; telecommunication security; IMS system; RFC 3261 protocol specification; SIP malformed message attack; SIP malformed message detection; SIP malformed message prevention; SIP protocol; SIP server; abstract data model; intrusion detection; prevention system; Bridges; Data models; Feature extraction; Intrusion detection; Kernel; Protocols; SIP; data model; detection and prevention; malformed messages; protocol features;
Conference_Titel :
Computational Aspects of Social Networks (CASoN), 2010 International Conference on
Conference_Location :
Taiyuan
Print_ISBN :
978-1-4244-8785-1
DOI :
10.1109/CASoN.2010.23
