Analyzing anomalies in anonymized SIP traffic

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F68407700%3A21230%2F14%3A00224971" target="_blank" >RIV/68407700:21230/14:00224971 - isvavai.cz</a>
Result on the web
<a href="http://80.ieeexplore.ieee.org.dialog.cvut.cz/xpl/articleDetails.jsp?tp=&arnumber=6857106" target="_blank" >http://80.ieeexplore.ieee.org.dialog.cvut.cz/xpl/articleDetails.jsp?tp=&arnumber=6857106</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1109/IFIPNetworking.2014.6857106" target="_blank" >10.1109/IFIPNetworking.2014.6857106</a>

Result language
angličtina
Original language name
Analyzing anomalies in anonymized SIP traffic
Original language description
The Session Initiation Protocol (SIP) is a signaling protocol widely used nowadays for controlling multimedia communication sessions. Thus, understanding and troubleshooting SIP behavior is of utmost importance to network designers and operators. However, SIP traffic traces are hard to come by due to privacy and confidentiality issues. SIP contains a lot of personal information spread within the various SIP messages - IP addresses, names, usernames and domains, e-mail addresses etc. The known IP-addressanonymization methods are thus insufficient. We present SiAnTo, an extended anonymization technique that substitutes session-participant information with matching, but nondescript, labels. This allows for SIP traces to be publicly shared, while keepinginteresting traffic-session properties intact. We further demonstrate its usefulness by studying the problem of SIP NAT traversal as recorded in the anonymized traces. We analyze properties of the so-called ?registration storm? incident a
Czech name
—
Czech description
—

Publication year
2014
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Similar results(10)