Design and Development of a Stateful Firewall for SIP-based Networks

Abdelkader Lahmadi 1 Olivier Festor 1
1 MADYNES - Management of dynamic networks and services
INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : SIP-based networks are becoming the de-facto standard for voice, video and instant messaging services. Being exposed to many threats while playing an essential role in the operation of essential services, the need for dedicated security management approaches is rapidely increasing. In this paper we present one dedicated security management approach based on a SIP specific vulnerability aware stateful firewall. Through known attack descriptions, we illustrate the power of the configuration language of the firewall which uses the capability to specify stateful objects that track data from multiple SIP elements within their lifetime. We demonstrate through measurments on a real implementation of the firewall its efficiency and performance.
Type de document :
[Research Report] 2008
Liste complète des métadonnées
Contributeur : Abdelkader Lahmadi <>
Soumis le : vendredi 7 novembre 2008 - 13:52:59
Dernière modification le : jeudi 11 janvier 2018 - 06:19:49


  • HAL Id : inria-00337570, version 1



Abdelkader Lahmadi, Olivier Festor. Design and Development of a Stateful Firewall for SIP-based Networks. [Research Report] 2008. 〈inria-00337570〉



Consultations de la notice