Overview of SIP Attacks and Countermeasures

El-Moussa, Fadi Ali; Mudhar, Parmindher; Jones, Andy

doi:10.1007/978-3-642-11530-1_10

Cited by 12 publications

(5 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Moreover, there are a variety of known attacks against VoIP systems, e.g., denial of service attacks [37] and billing attacks [38]. We refer to [10] for a recent survey on such attacks.…”

Section: Related Workmentioning

confidence: 99%

Speaker Recognition in Encrypted Voice Streams

Backes

Doychev

Dürmuth

et al. 2010

Computer Security – ESORICS 2010

View full text Add to dashboard Cite

Transmitting voice communication over untrusted networks puts personal information at risk. Although voice streams are typically encrypted to prevent unwanted eavesdropping, additional features of voice communication protocols might still allow eavesdroppers to discover information on the transmitted content and the speaker.We develop a novel approach for unveiling the identity of speakers who participate in encrypted voice communication, solely by eavesdropping on the encrypted traffic. Our approach exploits the concept of voice activity detection (VAD), a widely used technique for reducing the bandwidth consumption of voice traffic. We show that the reduction of traffic caused by VAD techniques creates patterns in the encrypted traffic, which in turn reveal the patterns of pauses in the underlying voice stream. We show that these patterns are speaker-characteristic, and that they are sufficient to undermine the anonymity of the speaker in encrypted voice communication. In an empirical setup with 20 speakers our analysis is able to correctly identify an unknown speaker in about 48% of all cases. Our work extends and generalizes existing work that exploits variable bit-rate encoding for identifying the conversation language and content of encrypted voice streams.

show abstract

“…Moreover, there are a variety of known attacks against VoIP systems, e.g., denial of service attacks [37] and billing attacks [38]. We refer to [10] for a recent survey on such attacks.…”

Section: Related Workmentioning

confidence: 99%

Speaker Recognition in Encrypted Voice Streams

Backes

Doychev

Dürmuth

et al. 2010

Computer Security – ESORICS 2010

View full text Add to dashboard Cite

show abstract

“…In VoIP, SIP is used to not only set up a session but also establish a secure communication. As SIP plays an integral role in current and future real time communication networks, protection of SIP networks from different types of attacks is crucial for VoIP security [18][19]. However, it is worth of noting that SIP security has the following weaknesses:…”

Section: Sip-based Secure Voip Communication Over Wmnsmentioning

confidence: 99%

PA-SIP: A Privacy-Aware SIP for VoIP over WMNs

Lin

Yang

2011

2011 7th International Conference on Wireless Communications, Networking and Mobile Computing

View full text Add to dashboard Cite

Voice over Internet Protocol (VoIP) over wireless mesh networks (WMNs) is becoming more and more popular due to its significant cost advantage, higher flexibility and wide coverage. One of the most basic requirements of VoIP is that it must provide privacy and security protection for VoIP clients. Unfortunately, little effort is spent on this area. In this paper, we focus on the privacy security of session initiation protocol (SIP) and propose a privacy-aware SIP called PA-SIP to enhance the VoIP privacy security. PA-SIP extends the SIP and applies a subjective logic based reputation mechanism to detect and isolate the insider malicious nodes. Finally, we analyze the PA-SIP in terms of security and performance.

show abstract

“…There are several different types of attacks that are targeted to VoIP infrastructure. Some possible attacks and vulnerability exploits are shown in [5] by El-Moussa et al The paper describes denial of service attacks, which are very common in computer networks, or SPAM over internet telephony. Furthermore, the authors mention brute-force attacks against authentication mechanism, which are somewhat similar to the prefix-guessing attacks described in this paper.…”

Section: Related Workmentioning

confidence: 99%

Using Application-Aware Flow Monitoring for SIP Fraud Detection

Čejka

Bartoš

Truxa

et al. 2015

Intelligent Mechanisms for Network Configuration and Security

View full text Add to dashboard Cite

Flow monitoring helps to discover many network security threats targeted to various applications or network protocols. In this paper, we show usage of the flow data for analysis of a Voice over IP (VoIP) traffic and a threat detection. A traditionally used flow record is insufficient for this purpose and therefore it was extended by application-layer information. In particular, we focus on the Session Initiation Protocol (SIP) and the type of a toll-fraud in which an attacker tries to exploit poor configuration of a private branch exchange (PBX). The attacker's motivation is to make unauthorized calls to PSTN numbers that are usually charged at high rates and owned by the attacker. As a result, a successful attack can cause a significant financial loss to the owner of PBX. We propose a method for stream-wise and near real-time analysis of the SIP traffic and detection of the described threat. The method was implemented as a module of the Nemea system and deployed on a backbone network. It was evaluated using simulated as well as real attacks.

show abstract

Overview of SIP Attacks and Countermeasures

Cited by 12 publications

References 5 publications

Speaker Recognition in Encrypted Voice Streams

Speaker Recognition in Encrypted Voice Streams

PA-SIP: A Privacy-Aware SIP for VoIP over WMNs

Using Application-Aware Flow Monitoring for SIP Fraud Detection

Contact Info

Product

Resources

About