A Framework for Automated Exploit Prevention from Known Vulnerabilities in Voice Over IP Services

Abdelkader Lahmadi 1 Olivier Festor 1
1 MADYNES - Management of dynamic networks and services
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
Abstract : We propose a prevention system for SIP-based networks which adopts a rule-based approach to build prevention specifications on SIP protocol activities that stop attacks exploiting an existing vulnerability before reaching their targets. Our approach innovates from existing solutions by making use of the contextual information of a vulnerability targeted by an attack to apply the prevention specification. Manually coding these prevention specifications is tedious and error-prone. Our method automatically infers prevention specifications by analyzing captured SIP exploit traffic. The detection engine uses an efficient method based on event graphs to match protocol activities against available prevention specifications. We describe the different components of our approach and show through an extended performance study of the implemented system its applicability to enterprise level VoIP protection.
Document type :
Journal articles
Complete list of metadatas

Cited literature [28 references]  Display  Hide  Download

https://hal.inria.fr/hal-00746977
Contributor : Abdelkader Lahmadi <>
Submitted on : Tuesday, October 30, 2012 - 11:23:56 AM
Last modification on : Thursday, February 7, 2019 - 5:34:44 PM
Long-term archiving on : Saturday, December 17, 2016 - 6:13:11 AM

File

etnsm_lahmadi.pdf
Files produced by the author(s)

Identifiers

Collections

Citation

Abdelkader Lahmadi, Olivier Festor. A Framework for Automated Exploit Prevention from Known Vulnerabilities in Voice Over IP Services. IEEE Transactions on Network and Service Management, IEEE, 2012, 9 (2), pp.114-127. ⟨10.1109/TNSM.2012.011812.110125⟩. ⟨hal-00746977⟩

Share

Metrics

Record views

483

Files downloads

296