SecSip: A Stateful Firewall for SIP-based Networks - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2009

SecSip: A Stateful Firewall for SIP-based Networks

Résumé

SIP-based networks are becoming the de-facto standard for voice, video and instant messaging services. Being exposed to many threats while playing an major role in the operation of essential services, the need for dedicated security management approaches is rapidly increasing. In this paper we present an original security management approach based on a specific vulnerability aware SIP stateful firewall. Through known attack descriptions, we illustrate the power of the configuration language of the firewall which uses the capability to specify stateful objects that track data from multiple SIP elements within their lifetime. We demonstrate through measurements on a real implementation of the firewall its efficiency and performance.

Mots clés

Fichier principal
Vignette du fichier
im09.pdf (287.76 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

inria-00404853 , version 1 (17-07-2009)

Identifiants

  • HAL Id : inria-00404853 , version 1
  • ARXIV : 0907.3045

Citer

Abdelkader Lahmadi, Olivier Festor. SecSip: A Stateful Firewall for SIP-based Networks. 11th IFIP/IEEE International Symposium on Integrated Network Management - IM 2009, May 2009, Long Island, United States. ⟨inria-00404853⟩
186 Consultations
411 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More