Detection of Signaling Vulnerabilities in Session Initiation Protocol - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2021

Detection of Signaling Vulnerabilities in Session Initiation Protocol

Résumé

This paper investigates the detection of abnormal sequences of signaling packets purposely generated to perpetuate signaling-based attacks in computer networks. The problem is studied for the Session Initiation Protocol (SIP) using a dataset of signaling packets exchanged by multiple end-users. The paper starts to briefly characterize the adopted dataset and introduces a few definitions to propose a deep learning-based approach to detect possible attacks. The solution is based on the definition of an orthogonal space capable of representing the sampling space for each time step, which is then used to train a recurrent neural network to classify the type of SIP dialog for the sequence of packets observed so far. When a sequence of observed SIP messages is unknown, this represents possible exploitation of a vulnerability and in that case, it should be classified accordingly. The proposed classifier is based on supervised learning of two different sets of anomalous and non-anomalous sequences, which is then tested to identify the detection performance of unknown SIP sequences. Experimental results are presented to assess the proposed solution, which validates the proposed approach to rapidly detect signaling-based attacks.
Fichier principal
Vignette du fichier
512066_1_En_20_Chapter.pdf (383.84 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03685930 , version 1 (02-06-2022)

Licence

Identifiants

Citer

Diogo Pereira, Rodolfo Oliveira. Detection of Signaling Vulnerabilities in Session Initiation Protocol. 12th Doctoral Conference on Computing, Electrical and Industrial Systems (DoCEIS), Jul 2021, Costa de Caparica, Portugal. pp.209-217, ⟨10.1007/978-3-030-78288-7_20⟩. ⟨hal-03685930⟩
61 Consultations
65 Téléchargements

Altmetric

Partager

More