Security Framework for Designing SIP Scanner
عنوان مقاله: Security Framework for Designing SIP Scanner
شناسه ملی مقاله: ICEE21_196
منتشر شده در بیست و یکمین کنفرانس مهندسی برق ایران در سال 1392
شناسه ملی مقاله: ICEE21_196
منتشر شده در بیست و یکمین کنفرانس مهندسی برق ایران در سال 1392
مشخصات نویسندگان مقاله:
Mitra Alidoosti - Iran University of Science and
Hassan Asgharian - Iran University
Ahmad Akbari - Iran University
خلاصه مقاله:
Mitra Alidoosti - Iran University of Science and
Hassan Asgharian - Iran University
Ahmad Akbari - Iran University
The purpose of this paper is to provide a framework for detecting vulnerabilities in SIP (Session Initiation Protocol) networks. In other words, we try to find weaknesses in SIP enabled entities that an attacker by exploiting them is able to attack the system and affect it. This framework is provided by the concept of penetration testing and is designed to be flexible and extensible, and has the capability to customize for other similar session based protocols. It can be also extended for several attacks. To satisfy the above objectives, the framework is designed with five main modules for discovery, information modeling, operation, evaluation and report. After setting up a test-bed as a typical VoIP system to show the validity of the proposed framework, this system has been implemented as a SIP vulnerability scanner. We also defined appropriate metrics for gathering the performance statistics of SIP components. Our test-bed is deployed by open-source applications and used for validation and also evaluation of proposed framework
کلمات کلیدی: Vulnerability scanner, SIP, Denial of Service Attacks, Framework, Evaluation
صفحه اختصاصی مقاله و دریافت فایل کامل: https://civilica.com/doc/208253/