Detection of Signaling Vulnerabilities in Session Initiation Protocol - 12th IFIP WG 5.5/SOCOLNET Advanced Doctoral Conference on Computing, Electrical and Industrial Systems, DoCEIS 2021 Access content directly
Conference Papers Year : 2021

Detection of Signaling Vulnerabilities in Session Initiation Protocol

Abstract

This paper investigates the detection of abnormal sequences of signaling packets purposely generated to perpetuate signaling-based attacks in computer networks. The problem is studied for the Session Initiation Protocol (SIP) using a dataset of signaling packets exchanged by multiple end-users. The paper starts to briefly characterize the adopted dataset and introduces a few definitions to propose a deep learning-based approach to detect possible attacks. The solution is based on the definition of an orthogonal space capable of representing the sampling space for each time step, which is then used to train a recurrent neural network to classify the type of SIP dialog for the sequence of packets observed so far. When a sequence of observed SIP messages is unknown, this represents possible exploitation of a vulnerability and in that case, it should be classified accordingly. The proposed classifier is based on supervised learning of two different sets of anomalous and non-anomalous sequences, which is then tested to identify the detection performance of unknown SIP sequences. Experimental results are presented to assess the proposed solution, which validates the proposed approach to rapidly detect signaling-based attacks.
Fichier principal
Vignette du fichier
512066_1_En_20_Chapter.pdf (383.84 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03685930 , version 1 (02-06-2022)

Licence

Attribution

Identifiers

Cite

Diogo Pereira, Rodolfo Oliveira. Detection of Signaling Vulnerabilities in Session Initiation Protocol. 12th Doctoral Conference on Computing, Electrical and Industrial Systems (DoCEIS), Jul 2021, Costa de Caparica, Portugal. pp.209-217, ⟨10.1007/978-3-030-78288-7_20⟩. ⟨hal-03685930⟩
28 View
13 Download

Altmetric

Share

Gmail Facebook X LinkedIn More