اضافه کردن به علاقه‌مندی‌ها

نویسنده(ها)

، ،

محل انتشار

International Journal Information and Communication Technology Research

اطلاعات انتشار

هشتم،شماره۱، Winter ۲۰۱۶، سال

صفحات

۹ صفحه، از صفحه‌ی ۳۳ تا صفحه‌ی ۴۱

Session Initiation Protocol (SIP) is the main signaling protocol of the next generation networks. The security issues of SIP–based entities (i.e. proxy servers and clients) have a direct impact on the perceived quality of experience of end users in multimedia sessions. In this paper, our focus is on the SIP flooding attacks including denial of service and distributed denial of service attacks. After classifying various types of SIP attacks based on their sources, we extract four feature sets based on the specification of its attack group, as well as the normal behavior of the SIP state machine specified in RFC 3261. We then minimize the number of derived features in each set to reduce the computational complexity of our proposed approach. This facilitates employing the engineered feature sets in embedded SIP–based devices such as cell phones and smart TVs. We evaluate the performance of the proposed feature sets in detecting SIP attack sequence. For this, we design and implement a real test–bed for SIP–based services to generate normal and attack traffics. The experimental results confirm that the engineered feature sets perform well in terms of detection accuracy and false alarm rates in classifying benign and anomaly traffic in various attack scenarios.

راهنمای دریافت مقاله‌ی «Detecting Flood–based Attacks against SIP Proxy Servers and Clients using Engineered Feature Sets» در حال تکمیل می‌باشد.

دریافت فایل PDF

۴۲۰۰ تومان

دریافت فایل Word + PDF

۸۵۰۰ تومان