Title
SecSip: a stateful firewall for SIP-based networks
Abstract
SIP-based networks are becoming the de-facto standard for voice, video and instant messaging services. Being exposed to many threats while playing an major role in the operation of essential services, the need for dedicated security management approaches is rapidly increasing. In this paper we present an original security management approach based on a specific vulnerability aware SIP stateful firewall. Through known attack descriptions, we illustrate the power of the configuration language of the firewall which uses the capability to specify stateful objects that track data from multiple SIP elements within their lifetime. We demonstrate through measurements on a real implementation of the firewall its efficiency and performance.
Year
DOI
Venue
2009
10.1109/INM.2009.5188807
integrated network management
Keywords
DocType
Volume
instant messaging service,original security management approach,aware sip stateful firewall,stateful object,de-facto standard,multiple sip element,essential service,configuration language,dedicated security management approach,sip-based network,environmental management,authorisation,distributed denial of service,voip,protocols,col,security,data security,satisfiability,voice over ip,data mining,internet protocol,internet telephony,session initiation protocol,service architecture,specification language,rule based,firewall,knowledge base,security management,stateful firewall,performance index,sip
Conference
abs/0907.3045
ISSN
Citations 
PageRank 
11th IFIP/IEEE International Symposium on Integrated Network Management (2009)
3
0.39
References 
Authors
12
2
Name
Order
Citations
PageRank
Abdelkader Lahmadi19018.46
Olivier Festor266585.40