CA2537069C - Systeme et methode pour assurer la securite des communications sip - Google Patents

Systeme et methode pour assurer la securite des communications sip Download PDF

Info

Publication number
CA2537069C
CA2537069C CA2537069A CA2537069A CA2537069C CA 2537069 C CA2537069 C CA 2537069C CA 2537069 A CA2537069 A CA 2537069A CA 2537069 A CA2537069 A CA 2537069A CA 2537069 C CA2537069 C CA 2537069C
Authority
CA
Canada
Prior art keywords
sip
security device
messages
message
security
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
CA2537069A
Other languages
English (en)
Other versions
CA2537069A1 (fr
Inventor
Richard Melvin Fogel
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
WatchGuard Technologies Inc
Original Assignee
WatchGuard Technologies Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by WatchGuard Technologies Inc filed Critical WatchGuard Technologies Inc
Priority to CA2537069A priority Critical patent/CA2537069C/fr
Priority to PCT/CA2007/000247 priority patent/WO2007095726A1/fr
Publication of CA2537069A1 publication Critical patent/CA2537069A1/fr
Application granted granted Critical
Publication of CA2537069C publication Critical patent/CA2537069C/fr
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/1066—Session management
    • H04L65/1101—Session protocols
    • H04L65/1104—Session initiation protocol [SIP]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • General Business, Economics & Management (AREA)
  • Multimedia (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)

Abstract

Un dispositif de sécurité pour les communications en SIP fonctionnant pour entraver leffet des attaques hostiles ou événements erronés involontaires sur la fourniture de services basés sur le protocole SIP dans un réseau privé et entre des réseaux privés et publics. Le dispositif de sécurité fonctionne comme un pare-feu classique, NAT et PAT pour isoler les agents utilisateurs SIP sur le réseau privé des agents utilisateurs SIP sur le réseau public et pour mettre sur une liste noire les appelants non désirés. Le dispositif de sécurité comprend également de préférence un dispositif danalyse antivirus pour analyser les pièces jointes aux sessions ou aux autres communications, pour déterminer et bloquer les données contaminées par des virus et le dispositif de sécurité comprend une pile SIP durcie pour rechercher et détecter les messages SIP mal formés afin dempêcher les attaques hostiles ou les messages derreur davoir des conséquences néfastes sur le fonctionnement des services SIP.
CA2537069A 2006-02-21 2006-02-21 Systeme et methode pour assurer la securite des communications sip Expired - Lifetime CA2537069C (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CA2537069A CA2537069C (fr) 2006-02-21 2006-02-21 Systeme et methode pour assurer la securite des communications sip
PCT/CA2007/000247 WO2007095726A1 (fr) 2006-02-21 2007-02-19 Systeme et procede pour securiser des communications basees sur le protocole sip

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CA2537069A CA2537069C (fr) 2006-02-21 2006-02-21 Systeme et methode pour assurer la securite des communications sip

Publications (2)

Publication Number Publication Date
CA2537069A1 CA2537069A1 (fr) 2007-08-21
CA2537069C true CA2537069C (fr) 2013-06-25

Family

ID=38433791

Family Applications (1)

Application Number Title Priority Date Filing Date
CA2537069A Expired - Lifetime CA2537069C (fr) 2006-02-21 2006-02-21 Systeme et methode pour assurer la securite des communications sip

Country Status (1)

Country Link
CA (1) CA2537069C (fr)

Also Published As

Publication number Publication date
CA2537069A1 (fr) 2007-08-21

Similar Documents

Publication Publication Date Title
US8464329B2 (en) System and method for providing security for SIP-based communications
US8582567B2 (en) System and method for providing network level and nodal level vulnerability protection in VoIP networks
US8635693B2 (en) System and method for testing network firewall for denial-of-service (DoS) detection and prevention in signaling channel
US7716729B2 (en) Method for responding to denial of service attacks at the session layer or above
US9473529B2 (en) Prevention of denial of service (DoS) attacks on session initiation protocol (SIP)-based systems using method vulnerability filtering
US8514845B2 (en) Usage of physical layer information in combination with signaling and media parameters
Ormazabal et al. Secure sip: A scalable prevention mechanism for dos attacks on sip based voip systems
US7653938B1 (en) Efficient cookie generator
Shan et al. Research on security mechanisms of SIP-based VoIP system
WO2007095726A1 (fr) Systeme et procede pour securiser des communications basees sur le protocole sip
Lindqvist et al. Cure for spam over internet telephony
US7742463B2 (en) Security gatekeeper for a packetized voice communication network
Voznak et al. Threats to voice over IP communications systems
CA2537069C (fr) Systeme et methode pour assurer la securite des communications sip
Duanfeng et al. Security mechanisms for SIP-based multimedia communication infrastructure
Deng et al. Advanced flooding attack on a SIP server
Hung et al. Through the looking glass: Security issues in VoIP applications
Hussain et al. A lightweight countermeasure to cope with flooding attacks against session initiation protocol
Collier Basic vulnerability issues for SIP security
Behl et al. An analysis of security implications in session initiation protocol (SIP)
Ahmad et al. VoIP security: A model proposed to mitigate DDoS attacks on SIP based VoIP network
Ehlert Denial-of-service detection and mitigation for SIP communication networks.
Arya Chandrapal Singh et al. VoIP Security Threat Taxonomy and Privacy
Alkali Voice over Internet Protocol Networks: Security Pitfalls
KR20100027829A (ko) 가상 프록시 서버를 이용한 에스아이피 공격탐지 시스템 및방법

Legal Events

Date Code Title Description
EEER Examination request
MPN Maintenance fee for patent paid

Free format text: FEE DESCRIPTION TEXT: MF (PATENT, 19TH ANNIV.) - STANDARD

Year of fee payment: 19

U00 Fee paid

Free format text: ST27 STATUS EVENT CODE: A-4-4-U10-U00-U101 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: MAINTENANCE REQUEST RECEIVED

Effective date: 20250210

U11 Full renewal or maintenance fee paid

Free format text: ST27 STATUS EVENT CODE: A-4-4-U10-U11-U102 (AS PROVIDED BY THE NATIONAL OFFICE); EVENT TEXT: MAINTENANCE FEE PAYMENT DETERMINED COMPLIANT

Effective date: 20250210