Artemisa: an Open-Source Honeypot Back-end to Support Security in VoIP Domains

Rodrigo Do Carmo 1 Mohamed Nassar 2 Olivier Festor 2
2 MADYNES - Management of dynamic networks and services
INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : Voice over IP (VoIP) and the Session Initiation Protocol (SIP) are establishing themselves as strong players in the field of multimedia communications over IP, leveraged by low cost services and easy management. Nevertheless, the security aspects are not yet fully mastered. In this paper we present an open-source implementation of a VoIP SIP-specific honeypot named Artemisa. The honeypot is designed to connect to a VoIP enterprise domain as a back-end user-agent in order to detect malicious activity at an early stage. Moreover, the honeypot can play a role in the real time adjustment of the security policies of the enterprise domain where it is deployed. We aim, by this contribution, to encourage the deployment of such honeypots at large scale and the collection of attack traces. We test the capacity of the honeypot to handle a series of known SIP attacks and present results from diverse scenarios.
Type de document :
Communication dans un congrès
IFIP/IEEE International Symposium on Integrated Network Management - IM 2011, May 2011, Dublin, Ireland. IEEE, 2011
Liste complète des métadonnées

Littérature citée [12 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/inria-00594857
Contributeur : Mohamed Nassar <>
Soumis le : dimanche 5 juin 2011 - 12:30:28
Dernière modification le : vendredi 27 avril 2018 - 12:06:02
Document(s) archivé(s) le : mardi 6 septembre 2011 - 02:20:32

Fichier

TS_14c_78368.pdf
Fichiers éditeurs autorisés sur une archive ouverte

Identifiants

  • HAL Id : inria-00594857, version 1

Collections

Citation

Rodrigo Do Carmo, Mohamed Nassar, Olivier Festor. Artemisa: an Open-Source Honeypot Back-end to Support Security in VoIP Domains. IFIP/IEEE International Symposium on Integrated Network Management - IM 2011, May 2011, Dublin, Ireland. IEEE, 2011. 〈inria-00594857〉

Partager

Métriques

Consultations de la notice

368

Téléchargements de fichiers

1226