Honeypot-based VoIP防禦系統

Abstract

With the Internet being universal, it becomes a new trend to communicate with others through Voice over Internet Protocol (VoIP). Communication is getting more populous. Session Initiation Protocol (SIP) is in charge of controlling the signaling of communication establishment. Because SIP is a communication protocol of application layer, a lot of weakness and threats are possible. At present, most commonly de facto standardization protocols, such as HTTP digest, Transport Layer Security (TLS), secure SIP (SIPS), IP security (IPsec) and Secure MIME (S/MIME), are employed to meet the system security requirement. In addition to the proposals of standardization techniques, an IDS can provide system managers an alert message before assailant attacks are taking place. The critical challenge of IDS is the large amount of alert occurrences within a short period of time. In the paper, we will assort the VoIP-related assailments by attack tree, and also forge the communications between users and attackers by using Honeypot to collect the information of the despiteful attackers. The Honeypot-based user agent will not only supplement the deficiency in the information collection by Intrusion Detection Systems, but also increase the probability of capturing real invaders. We expect to effectively protect SIP services from damages caused by malicious attacks.