An Efficient Intrusion Detection and Prevention System against SIP Malformed Messages Attacks

摘要

SIP malformed messages detection and prevention has become an important indicator of high availability for SIP servers or IMS system. This paper describes the SIP malformed messages attacks, analyses sip protocol features and builds an abstract data model according to RFC 3261 protocol specification. The author presents an efficient intrusion detection and prevention system against SIP malformed messages attacks. Using Hybrid detection techniques, the paper increases detection accuracy against SIP malformed message attacks and implements a detection algorithm in the kernel layer which improves the performance of the system.