SecSip: A Stateful Firewall for SIP-based Networks

Abdelkader Lahmadi 1 Olivier Festor 1
1 MADYNES - Management of dynamic networks and services
INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : SIP-based networks are becoming the de-facto standard for voice, video and instant messaging services. Being exposed to many threats while playing an major role in the operation of essential services, the need for dedicated security management approaches is rapidly increasing. In this paper we present an original security management approach based on a specific vulnerability aware SIP stateful firewall. Through known attack descriptions, we illustrate the power of the configuration language of the firewall which uses the capability to specify stateful objects that track data from multiple SIP elements within their lifetime. We demonstrate through measurements on a real implementation of the firewall its efficiency and performance.
Keywords : SIP VoIP Security Firewall
Type de document :
Communication dans un congrès
11th IFIP/IEEE International Symposium on Integrated Network Management - IM 2009, May 2009, Long Island, United States. 2009
Liste complète des métadonnées

Littérature citée [16 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/inria-00404853
Contributeur : Abdelkader Lahmadi <>
Soumis le : vendredi 17 juillet 2009 - 12:15:23
Dernière modification le : jeudi 11 janvier 2018 - 06:19:48
Document(s) archivé(s) le : mardi 15 juin 2010 - 18:54:06

Fichiers

im09.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : inria-00404853, version 1
  • ARXIV : 0907.3045

Collections

Citation

Abdelkader Lahmadi, Olivier Festor. SecSip: A Stateful Firewall for SIP-based Networks. 11th IFIP/IEEE International Symposium on Integrated Network Management - IM 2009, May 2009, Long Island, United States. 2009. 〈inria-00404853〉

Partager

Métriques

Consultations de la notice

248

Téléchargements de fichiers

322