Abstract
With the widespread adoption of session Session Initiation Protocol (SIP)-based VoiceoverIP (VoIP), understanding the characteristics of SIP traffic behavior is critical to problem diagnosis and security protection of IP telephony. In this chapter, we propose a general methodology for profiling SIP-based VoIP traffic behavior at multiple levels: SIP server host, server entity (e.g., registrar and call proxy), and individual user levels. Using SIP traffic traces captured in a production VoIP service, we illustrate the characteristics of SIP-based VoIP traffic behavior in an operational network and demonstrate the effectiveness of our general profiling methodology. In particular, we show how our profiling methodology can help identify performance anomalies through a case study. We also demonstrate the efficacy of our methodology in detecting potential VoIP attacks through testbed experimentation.
| Original language | English (US) |
|---|---|
| Title of host publication | VoIP Handbook |
| Subtitle of host publication | Applications, Technologies, Reliability, and Security |
| Publisher | CRC Press |
| Pages | 187-206 |
| Number of pages | 20 |
| ISBN (Electronic) | 9781420070217 |
| ISBN (Print) | 9781420070200 |
| DOIs | |
| State | Published - Jan 1 2018 |
Bibliographical note
Publisher Copyright:© 2009 by Taylor and Francis Group, LLC.