Paper Info
Title
A Framework for Automated Exploit Prevention from Known Vulnerabilities in Voice over IP Services
Abstract
We propose a prevention system for SIP-based networks which adopts a rule-based approach to build prevention specifications on SIP protocol activities that stop attacks exploiting an existing vulnerability before reaching their targets. Our approach innovates from existing solutions by making use of the contextual information of a vulnerability targeted by an attack to apply the prevention specification. Manually coding these prevention specifications is tedious and error-prone. Our method automatically infers prevention specifications by analyzing captured SIP exploit traffic. The detection engine uses an efficient method based on event graphs to match protocol activities against available prevention specifications. We describe the different components of our approach and show through an extended performance study of the implemented system its applicability to enterprise level VoIP protection.
Year
DOI
Venue
2012
10.1109/TNSM.2012.011812.110125
IEEE Transactions on Network and Service Management
Keywords
Field
DocType
Internet telephony,computer network security,graph theory,knowledge based systems,signalling protocols,SIP protocol activities,SIP-based networks,automated exploit prevention,contextual information,detection engine,enterprise level VoIP protection,event graphs,known vulnerabilities,prevention specifications coding,protocol activities,rule-based approach,voice over IP services,Exploit prevention systems,security,session initiation protocol,voice over IP,vulnerability management
Computer science,Network security,Knowledge-based systems,Computer network,Session Initiation Protocol,Coding (social sciences),Exploit,Vulnerability management,Voice over IP,Vulnerability,Distributed computing
Journal
Volume
Issue
ISSN
9
2
1932-4537
Citations 
PageRank 
References 
4
0.39
19
Authors
2
Name
Order
Citations
PageRank
Abdelkader Lahmadi19018.46
Olivier Festor266585.40