SPIT DETECTION AND PREVENTION

Yıl 2017, Cilt: 17 Sayı: 1, 3249 - 3255, 27.03.2017

Selin Kamas Muhammed Ali Aydın

Öz

In telecommunication technology VoIP protocol has become a very popular technology as it is cheap, efficient. Also it has easy deployment. While it has lots of advantages it brings lots of vulnerabilities. These are Man in the middle Attack, Replay Attack, Teardown Attacks, Flooding Attacks, Toll Fraud and SPIT (Spam over IP Telephony). Spam over IP Telephony (SPIT) is an known threat in the Voice over IP Networks (VoIP). Even though evolved from email spam, SPIT is more obstructive and intrusive in nature. SPIT attack is called important threat of reliability and availability of VoIP system and also it is difficult to make SPIT call in PSTN (Public Switched Telephone Network) system. In this work It is tried to say how SPIT attacks occur, how attackers do it and also it is mentioned that prevention mechanisms and compare them in terms of feasibility, advantages and disadvantages..

Anahtar Kelimeler

VoIP, VoIP security, SPAM over IP Telephony, SPIT, Captcha, Whitelist, Blacklist

Kaynakça

• [1] J. Rosenberg "The Session Initiation Protocol (SIP) and Spam," draftietf- sipping-spam-01.txt, July 2005. Work in progress.
• [2] A. Baxter. Shtoom. http://divmod.org/ projects/shtoom, April 2006.
• [3] Snoeren, Alex C., and Hari Balakrishnan. "An end-to-end approach to host mobility." Proceedings of the 6th annual international conference on Mobile computing and networking. ACM, 2000.
• [4] L. von Ahn, M. Blum, N. J. Hopper, and J. Langford. The Captcha Project. http://www.captcha. net/, April 2006.
• [5] Bila, Nilton. "Dealing with SPAM in Voice over IP." change 34.4: 37.
• [6] FELTEN, E. (2005, March 15). Unwanted Calls and Spam on VoIP. Retrieved from https://freedom-to-tinker.com/blog/felten/unwanted-calls-and-spam-voip/
• [7] C. Garretson. Qovia ready to take on VoIP spam. http://www.networkworld.com/news/ 2004/071204qovia.html, July 2004.
• [8] Prevention of Spam over IP Telephony (SPIT)Juergen QUITTEK, Saverio NICCOLINI, Sandra TARTARELLI, Roman SCHLEGEL
• [9] Edelson, E.: Voice over IP: security pitfalls. Network Security, vol. 2005, pp. 4–7 (2005)
• [10] Performance analysis of VoIP spoofing attacks using classification algorithms (2014 Application and Innovation in Mobile Computing)
• [11] K. Srivastava, H. Schulzrinne, “Preventing Spam for SIP-based Instant Messages and Sessions”, Technical report, Columbia, 2004.
• [12] https://tools.ietf.org/html/rfc5039
• [13] Secure Layered Architecture for Session Initiation Protocol based on SIPSSO. 2015 12th International Conference on Information Technology - New Generations
• [14] A comprehensive SPIT Detection and Prevention framework based on Reputation Model on Call Communication Patterns. Farideh Barghi, Mohammad Hossein, Hossein Khosravi Roshtkhari.
• [15] VOIPSA. Confirmed cases of SPIT. Mailing list (2006),http://www.voipsa.org/pipermail/voipsec-voipsa.org/2006-March/001326.html
• [16] The Dendritic Cell Algorithm Thesis submitted to the University of Nottingham for the degree of Doctor of Philosophy. Julie Greensmith October 2007
• [17] Dendritic Cell Algorithm for preventing Spam over IP Telephony. V.Srihari, P.Kalpana , R.Anitha.2015
• [18] D. Shin, J. Ahn, and C. Shim, “Progressive Multi Gray-Leveling: AVoice Spam Protection Algorithm,” IEEE Network, vol. 20, pp. 18–24, September/October 2006.
• [19] Detection and Filtering Spam over Internet Telephony- A User-behavior-aware Intermediate-network-based Approach. Yan Bai1, Xiao Su1 and Bharat Bhargava3
• [20] NASSAR, M., STATE, R., AND FESTOR, O. Monitoring SIP traffic using support vector machines. In RAID '08: Proceedings of the 11th international symposium on Recent Advances in Intrusion Detection (Berlin, Heidelberg, 2008), Springer-Verlag, pp. 311-330.
• [21] On the inefficacy of Euclidean classifiers for detecting self-similar Session Initiation Protocol (SIP) messages. Anil Mehta*, Neda Hantehzadeh*, Vijay K. Gurbanit, Tin Kam Hot, Jun Koshiko* and Ramanarayanan Viswanathan*12th IFIP/IEEE International Symposium on Integrated Network Management 2011