A SIP delayed based mechanism for detecting VOIP flooding attacks
Khaled Dassouki, Haı̈dar Safa, Abbas Hijazi, Wassim El-Hajj · 2016
SIP is amongst the most popular Voice over IP signaling protocols. Its deployment in live scenarios showed its vulnerability to flooding attacks. In this paper, we present a SIP flooding attack detection mechanism that dynamically detects SIP flooding attacks and correlates in real time the temporal characteristics of SIP reliable mechanism and the number of received INVITE requests. Experimental results show that the proposed mechanism is able to detect SIP flooding rapidly and does not suffer from false alarms. When compared to other similar approaches in literature, the proposed approach outperformed the other approaches in terms of detections speed and accuracy.