Title
Hiding Data In Sip Session
Abstract
Steganography is method of hiding data inside of existing channels of communications. SIP is one of the key protocols used to implement Voice over IP. It is used for establishing, managing and termination of the communication session. During the call, SIP is used for changing parameters of the session as well as for the transfer of DTMF or instant messages. We analyzed scenario where two users (Alice and Bob) want to exchange hidden message via SIP protocol. Their call is established over Kamailio, SIP Proxy server. We were interested in a number of SIP messages that arc exchanged during the call with an average duration of 60 seconds. Then we used SNORT IDS with hard coded rules and AD.SNORT (Anomaly Detection) for detecting irregularities while we increased the number of SIP messages. Finally, we calculated the available steganographic bandwidth, amount of hidden data that can be transferred in these messages. The results obtained from the experiments show that it is possible to create a covert channel over SIP with bandwidth of several kbps.
Year
DOI
Venue
2015
10.1109/TSP.2015.7296445
2015 38TH INTERNATIONAL CONFERENCE ON TELECOMMUNICATIONS AND SIGNAL PROCESSING (TSP)
Keywords
Field
DocType
Steganography, SIP, Anomaly Detection, Kamailio, VoIP, Proxy
Hard coding,Steganography,Alice and Bob,Computer science,Covert channel,Computer network,Communication channel,Session Initiation Protocol,SIP trunking,Voice over IP
Conference
Citations 
PageRank 
References 
1
0.36
6
Authors
3
Name
Order
Citations
PageRank
Miralem Mehic1166.38
Jiri Slachta254.06
Miroslav Voznak311338.68