Prevention of Anomalous SIP Messages

Ming Yang Su, Chung Chun Chen
2013 International Journal of Future Computer and Communication  
Voice over internet protocol (VoIP) communication services have been widely used in recent years. VoIP is a real-time communication service prone to attack; once attacked, it is more difficult to be addressed in real time as compared to off-line Email. The attacker may transmit large sum of online request messages to the SIP server to cause congestion or even breakdown of the machine to make it unable to provide services. The proposed defense mechanism will filter malformed messages
more » ... with SIP protocol and judge whether SIP server suffers any flooding attack. Once attack is detected, this study will immediately update the black-list on the SIP server and use the SIP server built-in function to block the online requests of specific users on the black-list. Index Terms-Flooding attack, malformed messages, session initiation protocol (SIP), voice over internet protocol (VOIP).
doi:10.7763/ijfcc.2013.v2.203 fatcat:nie2yvpz7bcmjkqclcixd32eoy