A lightweight protection mechanism against signaling attacks in a SIP-based VoIP environment

被引:28
作者
Geneiatakis, Dimitris [1 ]
Lambrinoudakis, Costas [1 ]
机构
[1] Univ Aegean, Dept Informat & Commun Syst Engn, Lab Informat & Commun Syst Secur, Karlovassi 83200, Samos, Greece
关键词
Session Initiation Protocol (SIP); signaling attacks; Voice over IP (VoIP); security;
D O I
10.1007/s11235-008-9065-5
中图分类号
TN [电子技术、通信技术];
学科分类号
0809 ;
摘要
The advent of Voice over IP (VoIP) has offered numerous advantages but, at the same time, it has introduced security threats not previously encountered in networks with a closed architecture like the Public Switch Telephone Networks (PSTN). One of these threats is that of signaling attacks. This paper examines the signaling attacks in VoIP environments based on the Session Initiation Protocol (SIP), focusing on the design of a robust lightweight protection mechanism against them. The proposed scheme introduces a new SIP header, namely the Integrity-Auth header, which is utilized for protecting the SIP-based VoIP services from signaling attacks while ensuring authenticity and integrity.
引用
收藏
页码:153 / 159
页数:7
相关论文
共 26 条
  • [1] Andreasen F, 2003, 3435 RFC
  • [2] [Anonymous], 3851 IETF RFC
  • [3] [Anonymous], 2617 IETF RFC
  • [4] [Anonymous], 2000, SSL TLS DESIGNING BU
  • [5] [Anonymous], 2005, P 5 INT NETW C
  • [6] CAO F, 2006, P 1 INT C AV REL SEC, V20, P8
  • [7] CHEN EY, 2006, P 1 IEEE WORKSH VOIP, V3, P53
  • [8] DAGIUKLAS T, 2005, GEN RELIABILITY SECU
  • [9] GARCIAMARTIN M, 3455 RFC
  • [10] SURVEY OF SECURITY VULNERABILITIES IN SESSION INITIATION PROTOCOL
    Geneiatakis, Dimitris
    Dagiuklas, Tasos
    Kambourakis, Georgios
    Lambrinoudakis, Costas
    Gritzalis, Stefanos
    Ehlert, Sven
    Sisalem, Dorgham
    [J]. IEEE COMMUNICATIONS SURVEYS AND TUTORIALS, 2006, 8 (03) : 68 - 81