Mendeley
TY  _  JOUR
ID  -  13930804143332804
TI  -  SIP Vulnerability Scan Framework
JO  -  Journal of Information Systems and Telecommunication (JIST) 
JA  -  ES
LA  -  en
SN  -  2322-1437
AU  -  Alidoosti Mitra
AU  -  Asgharian Hassan
AU  -  اکبری احمد
AD  -  Iran University of Science and Technology
AD  -  Iran University of Science and Technology
AD  -  
Y1  -  2014
PY  -  2014
VL  -  8
IS  -  2
SP  -  1
EP  -  10
KW  -  Vulnerability scanner
KW  -  SIP
KW  -  Denial of Service Attacks
KW  -  Framework
KW  -  Evaluation
DO  -  
N2  -  The purpose of this paper is to provide a framework for detecting vulnerabilities in SIP (Session Initiation Protocol) networks. We try to find weaknesses in SIP enabled entities that an attacker by exploiting them is able to attack the system and affect it. This framework is provided by the concept of penetration testing and is designed to be flexible and extensible, and has the capability to customize for other similar session based protocols. To satisfy the above objectives, the framework is designed with five main modules for discovery, information modeling, operation, evaluation and report. After setting up a test-bed as a typical VoIP system to show the validity of the proposed framework, this system has been implemented as a SIP vulnerability scanner. We also defined appropriate metrics for gathering the performance statistics of SIP components. Our test bed is deployed by open-source applications and used for validation and also evaluation of the proposed framework.
UR  - rimag.ir/fa/Article/14854
L1  - rimag.ir/fa/Article/Download/14854
ER  -  
