IP telephony Server Emulation for Monitoring and Analysis of Malicious Activity in VoIP Network

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F61989100%3A27240%2F13%3A86086874" target="_blank" >RIV/61989100:27240/13:86086874 - isvavai.cz</a>
Result on the web
<a href="http://www.uniza.sk/komunikacie/archiv/2013/2a/2a_2013en.pdf" target="_blank" >http://www.uniza.sk/komunikacie/archiv/2013/2a/2a_2013en.pdf</a>
DOI - Digital Object Identifier
—

Result language
angličtina
Original language name
IP telephony Server Emulation for Monitoring and Analysis of Malicious Activity in VoIP Network
Original language description
The paper aims at gathering information about attacks from real internet infrastructure and their analysis. For this purpose, we prepared a set of honeypots monitoring various aspects of VoIP infrastructure including SIP endpoint and SSH terminal emulation. SIP endpoints are registered with real SIP registrar and the incoming calls are routed to a honeypot according the rules in dialplan. The honeypot gathers valuable data about hacker?s activity with no threat to production systems. Analysis of the honeypot data is crucial for further improvement of existing security mechanisms in VoIP networks. The paper describes the honeypot?s behaviour and brings an analysis of a detected malicious activity as well.
Czech name
—
Czech description
—

Type
J<sub>x</sub> - Unclassified - Peer-reviewed scientific article (Jimp, Jsc and Jost)
CEP classification
IN - Informatics
OECD FORD branch
—

Publication year
2013
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Similar results(10)