Skip to Main content Skip to Navigation
Conference papers

Abusing SIP Authentication

Humberto Abdelnur 1 Tigran Avanesov 2 Michaël Rusinowitch 2 Radu State 1
1 MADYNES - Management of dynamic networks and services
INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
2 CASSIS - Combination of approaches to the security of infinite states systems
FEMTO-ST - Franche-Comté Électronique Mécanique, Thermique et Optique - Sciences et Technologies (UMR 6174), Inria Nancy - Grand Est, LORIA - FM - Department of Formal Methods
Abstract : The recent and massive deployment of Voice over IP infrastructures had raised the importance of the VoIP security and more precisely of the underlying signalization protocol SIP. In this paper, we will present a new attack against the authentication mechanism of SIP. This attack allows to perform toll fraud and call hijacking. We will detail the formal specification method that allowed to detect this vulnerability, highlight a simple usage case and propose a mitigation technique.
Document type :
Conference papers
Complete list of metadata

Cited literature [11 references]  Display  Hide  Download
https://hal.inria.fr/inria-00326077
Contributor : Humberto Abdelnur <>
Submitted on : Wednesday, October 1, 2008 - 3:21:51 PM
Last modification on : Friday, April 2, 2021 - 3:36:54 AM
Long-term archiving on: : Thursday, June 3, 2010 - 8:40:28 PM

File

Vignette du document
Abusing_SIP_Authentication.pdf
Files produced by the author(s)

Identifiers

Collections

CNRS | INRIA | UNIV-FCOMTE | UNIV-BM | FEMTO-ST | UNIV-BM-THESE | LORIA | UNIV-LORRAINE | LORIA-FM

Citation

Humberto Abdelnur, Tigran Avanesov, Michaël Rusinowitch, Radu State. Abusing SIP Authentication. Information Assurance and Security ( ISIAS), Sep 2008, Naples, Italy. pp.237-242, ⟨10.1109/IAS.2008.29⟩. ⟨inria-00326077⟩

Export

BibTeX TEI DC DCterms EndNote

Share

Metrics

Record views

346

Files downloads

1088

 

Contact                    Legal Notice                    Personal Data