Skip to Main content Skip to Navigation
New interface
Journal articles

A Framework for Automated Exploit Prevention from Known Vulnerabilities in Voice Over IP Services

Abdelkader Lahmadi 1 Olivier Festor 1 
1 MADYNES - Management of dynamic networks and services
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
Abstract : We propose a prevention system for SIP-based networks which adopts a rule-based approach to build prevention specifications on SIP protocol activities that stop attacks exploiting an existing vulnerability before reaching their targets. Our approach innovates from existing solutions by making use of the contextual information of a vulnerability targeted by an attack to apply the prevention specification. Manually coding these prevention specifications is tedious and error-prone. Our method automatically infers prevention specifications by analyzing captured SIP exploit traffic. The detection engine uses an efficient method based on event graphs to match protocol activities against available prevention specifications. We describe the different components of our approach and show through an extended performance study of the implemented system its applicability to enterprise level VoIP protection.
Document type :
Journal articles
Complete list of metadata

Cited literature [28 references]  Display  Hide  Download
Contributor : Abdelkader Lahmadi Connect in order to contact the contributor
Submitted on : Tuesday, October 30, 2012 - 11:23:56 AM
Last modification on : Wednesday, February 2, 2022 - 4:45:20 PM
Long-term archiving on: : Saturday, December 17, 2016 - 6:13:11 AM


Files produced by the author(s)




Abdelkader Lahmadi, Olivier Festor. A Framework for Automated Exploit Prevention from Known Vulnerabilities in Voice Over IP Services. IEEE Transactions on Network and Service Management, 2012, 9 (2), pp.114-127. ⟨10.1109/TNSM.2012.011812.110125⟩. ⟨hal-00746977⟩



Record views


Files downloads