Preventing Distributed Denial-of-Service Attacks on the IMS Emergency Services Support through Adaptive Firewall Pinholing

摘要

Emergency services are vital services that Next Generation Networks (NGNs)have to provide. As the IP Multimedia Subsystem (IMS) is in the heart of NGNs,3GPP has carried the burden of specifying a standardized IMS-based emergencyservices framework. Unfortunately, like any other IP-based standards, theIMS-based emergency service framework is prone to Distributed Denial of Service(DDoS) attacks. We propose in this work, a simple but efficient solution thatcan prevent certain types of such attacks by creating firewall pinholes thatregular clients will surely be able to pass in contrast to the attackersclients. Our solution was implemented, tested in an appropriate testbed, andits efficiency was proven.