Detection And Countermeasure Scheme For Call-Disruption Attacks On SIP-Based Voip Services

• Jea Tek Ryu,
• Byeong-hee Roh,
• Ki Yeol Ryu,
• Myungchul Yoon,

Vol. 6, No. 7, July 24, 2012
10.3837/tiis.2012.07.008, Download Paper (Free):

• SIP
• VoIP
• Call-Disruption Attack
• INFO Method
• authentication
• Asterisk

Abstract

Owing to its simplicity and flexibility, the session initiation protocol (SIP) has been widely adopted as a major session-management protocol for Internet telephony or Voice-over IP (VoIP) services. However, SIP has faced various types of security threats. Call-disruption attacks are some of the most severe threats they face, and can greatly inconvenience consumers. In this paper, we analyze such SIP call-disruption attacks, and propose a method for detecting and counteracting them by extending the SIP INFO method with authentication. Using the proposed method, both the target user and the SIP server can detect the existence of a call-disruption attack on a user and counteract the attack. We demonstrate the effectiveness of the proposed method from the viewpoint of computational complexity by configuring a test-bed with an Asterisk SIP proxy server and an SIP performance (SIPp) emulator.

Statistics

Cite this article