IP Telephony Server Emulation for Monitoring and Analysis of Malicious Activity in VOIP Network

Autor:	Jakub Safarik, Miroslav Voznak, Filip Rezac, Lukas Macura
Jazyk:	angličtina
Rok vydání:	2013
Předmět:	artemisa dionaea kippo voip attacks voip honeypot Transportation and communications HE1-9990 Science Transportation engineering TA1001-1280
Zdroj:	Communications, Vol 15, Iss 2A, Pp 191-196 (2013)
Druh dokumentu:	article
ISSN:	1335-4205 2585-7878
DOI:	10.26552/com.C.2013.2A.191-196
Popis:	The paper aims at gathering information about attacks from real internet infrastructure and their analysis. For this purpose, we prepared a set of honeypots monitoring various aspects of VoIP infrastructure including SIP endpoint and SSH terminal emulation. SIP endpoints are registered with real SIP registrar and the incoming calls are routed to a honeypot according the rules in dialplan. The honeypot gathers valuable data about hacker's activity with no threat to production systems. Analysis of the honeypot data is crucial for further improvement of existing security mechanisms in VoIP networks. The paper describes the honeypot's behaviour and brings an analysis of a detected malicious activity as well.
Databáze:	Directory of Open Access Journals
Externí odkaz:	https://doaj.org/article/0644e4cbbb334a9188f67b4b1d9a3036 Zobrazit plný text záznamu View record in DOAJ