Earticle

초록

영어

Voice over IP (VOIP) network, also known as Internet telephony, is growing increasingly having occupied a large part of the communications market. With the growth of each technology, the related security issues become of particular importance. Taking advantage of this technology in different environments with numerous features put at our disposal, there arises an increasing need to address the security threats. Being IP-based and playing a signaling role in VOIP networks, Session Initiation Protocol (SIP) lets the invaders use weaknesses of the protocol to disable VOIP service. One of the most important threats is denial of service attack, a branch of which in this article we have discussed as flooding attacks. These attacks make server resources wasted and deprive it from delivering service to authorized users. Distributed denial of service attacks and attacks with a low rate can mislead many attack detection mechanisms. In this paper, we introduce a mechanism which not only detects distributed denial of service attacks and low rate attacks, but can also identify the attackers accurately. We detect and prevent flooding attacks in SIP protocol using Shannon (FDP-S), Renyi (FDP-R) and Tsallis (FDP-T) entropy. We conducted an experiment to compare the percentage of detection and rate of false alarm messages using any of the Shannon, Renyi and Tsallis entropy as a measure of disorder . Implementation results show that, according to the parametric nature of the Renyi and Tsallis entropy, by changing the parameters, different detection percentages and false alarm rates will be gained with the possibility to adjust the sensitivity of the detection mechanism.

목차

Abstract
 1. Introduction
 2. Related Works
 3. Attack Detection and Prevention System
  3.1. Entropy
  3.2. Three-dimensional Compressed Summarized Table of Packet Data
  3.3. Detecting Attacks
  3.4. Preventing Attacks
  3.5. Length of Training and Testing Intervals
  3.6. Detection Threshold
 4. Implementation Results
  4.1. Experiments Test Bed
  4.2. Scenarios of Attacks
  4.3. Experiment Results
  4.4. The Memory, Computation and Delay Overhead
  4.5. Required Time for Detecting Attacks
 5. Future Work
 6. Conclusion
 References

키워드

저자

• Reihaneh Haji Mahdizdeh Zargar [ Department of Computer Engineering, Ferdowsi University of Mashhad (FUM) Mashhad, Iran ]
• Mohammad Hossein Yaghmaee Moghaddam [ Department of Computer Engineering, Ferdowsi University of Mashhad (FUM) Mashhad, Iran ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Hybrid Information Technology

• 간기

  격월간

• pISSN

  1738-9968

• 수록기간

  2008~2016

• 십진분류

  KDC 505 DDC 605