Hunting SIP Authentication Attacks Efficiently-Reference-Cited by-同舟云学术

Hunting SIP Authentication Attacks Efficiently

Published:2017 Issue: Volume: Page:125-130
ISSN:0302-9743
Container-title:Lecture Notes in Computer Science
language:
Short-container-title:

Author:

Jansky Tomáš,Čejka Tomáš,Bartoš Václav

Abstract

AbstractExtended flow records with application layer (L7) information allow for detection of various types of malicious traffic. Voice over IP (VoIP) is an example of technology that works on L7 and many attacks against it cannot be reliably detected using just basic flow information. Session Initiation Protocol (SIP), which is commonly used for VoIP signalling, is a frequent target of many types of attacks. This paper proposes and evaluates a novel algorithm for near real time detection of username scanning and password guessing attacks on SIP servers. The detection is based on analysis of L7 extended flow records.

Publisher

Springer International Publishing

Link

https://link.springer.com/content/pdf/10.1007/978-3-319-60774-0_9

Reference6 articles.

1. Cejka, T., Bartos, V., Svepes, M., Rosa, Z., Kubatova, H.: NEMEA: a framework for network traffic analysis. In: 12th International Conference on Network and Service Management (CNSM 2016), Montreal, Canada, October 2016

2. Lecture Notes in Computer Science;T Cejka,2015

3. Communication Fraud Control Association: Global fraud loss survey (2015). http://www.cfca.org/pdfsurvey/2015_CFCA_Global_Fraud_Loss_Survey_Press_Release.pdf

4. Dwivedi, H.: Hacking VoIP: Protocols, Attacks, and Countermeasures. No Starch Press, San Francisco (2009)

5. Gauci, S.: SIPVicious. Tools for auditing sip based VoIP systems (2012). https://code.google.com/p/sipvicious/

Cited by 2 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. On how VoIP attacks foster the malicious call ecosystem;Computers & Security;2022-08

2. Netfox detective: A novel open-source network forensics analysis tool;Forensic Science International: Digital Investigation;2020-12