International Journal of Communication Systems, ( ISI ), Volume (31), No (15), Year (2018-8) , Pages (1-26)

Title : ( Anomaly ‐ based DoS detection and prevention in SIP networks by modeling SIP normal traffic )

Authors: mahsa hossein pour moghaddam , Mohammad Hossein Yaghmaee Moghaddam , Seyed Amin Hosseini Seno , Hossein Khosraviroshkhari , Mohsen Asadi ,

Citation: BibTeX | EndNote


Due to the various features of Voice over Internet Protocol (VoIP), this technol- ogy has attracted the attention of many users in comparison with the tradi- tional telephony system. However, with the growth of this technology, the security issues and protection of its users against different kinds of threats have been raised as an essential requirement. Session Initiation Protocol is a pre- dominant protocol to initiate and terminate multimedia sessions in VoIP net- works that provide simplicity and text ‐ based features. Despite its mentioned advantages, these features impose several vulnerabilities on VoIP networks. Denial of Service attack, as one of the most common attacks against VoIP net- works, is also a noted security issue in the Internet Protocol platforms. In such attacks, the attacker tries to prevent service from authorized users by consum- ing server resources. These attacks can be launched by sending out ‐ of sequence messages, malformed messages, and flooding different kinds of messages. In this study, a new anomaly based method is presented for detection and preven- tion of these attacks. Normal traffic of a VoIP network is modeled by making a finite state machine, which is used for attack detection besides other proposed modules. Furthermore, a whitelist method is implemented using Bloom data structure for attack prevention. The proposed method is completely imple- mented and tested using different test scenarios. The obtained results show that by using proposed method, attacks can be detected more accurately with lower false ratios and delay in comparison with the existing methods.


, VoIP network, SIP security, DoS attacks, finite state machine (FSM)
برای دانلود از شناسه و رمز عبور پرتال پویا استفاده کنید.

author = {Hossein Pour Moghaddam, Mahsa and Yaghmaee Moghaddam, Mohammad Hossein and Hosseini Seno, Seyed Amin and Khosraviroshkhari, Hossein and Asadi, Mohsen},
title = {Anomaly ‐ based DoS detection and prevention in SIP networks by modeling SIP normal traffic},
journal = {International Journal of Communication Systems},
year = {2018},
volume = {31},
number = {15},
month = {August},
issn = {1074-5351},
pages = {1--26},
numpages = {25},
keywords = {VoIP network; SIP security; DoS attacks; finite state machine (FSM)},


%0 Journal Article
%T Anomaly ‐ based DoS detection and prevention in SIP networks by modeling SIP normal traffic
%A Hossein Pour Moghaddam, Mahsa
%A Yaghmaee Moghaddam, Mohammad Hossein
%A Hosseini Seno, Seyed Amin
%A Khosraviroshkhari, Hossein
%A Asadi, Mohsen
%J International Journal of Communication Systems
%@ 1074-5351
%D 2018