Exploiting VoIP softphone vulnerabilities to disable host computers: Attacks and mitigation

Ryan Farley and Xinyuan Wang

International Journal of Critical Infrastructure Protection, 2014, vol. 7, issue 3, 141-154

Abstract: As increasing numbers of people run VoIP softphones on their laptops and smartphones, vulnerabilities in VoIP protocols and systems introduce new threats to the computer systems that run VoIP softphones. This paper investigates key threats that target VoIP hosts and techniques for mitigating the threats. In particular, this paper shows that crafted SIP traffic can disable a Windows XP host that runs a Vonage VoIP softphone or a Linphone by consuming almost all the free memory within minutes. While this “noisy attack” can be effectively mitigated by threshold-based filtering, the paper demonstrates that a “stealthy attack” can be launched to defeat threshold-based filtering and disable the host computer without ever ringing the softphone. To mitigate the stealthy attack, the paper describes a limited context aware filtering approach that leverages the context and SIP protocol information to ascertain the intentions of a SIP message on behalf of the client. Experiments demonstrate that limited context aware filtering can effectively defeat a stealthy attack while allowing legitimate VoIP traffic and calls to go through.

Keywords: VoIP telephony; Softphones; Security; Host attacks; Defense mechanisms (search for similar items in EconPapers)
Date: 2014
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
http://www.sciencedirect.com/science/article/pii/S1874548214000432
Full text for ScienceDirect subscribers only

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:eee:ijocip:v:7:y:2014:i:3:p:141-154

DOI: 10.1016/j.ijcip.2014.07.001

Access Statistics for this article

International Journal of Critical Infrastructure Protection is currently edited by Leon Strous

More articles in International Journal of Critical Infrastructure Protection from Elsevier
Bibliographic data for series maintained by Catherine Liu ().