Sciweavers

Share
SECURWARE
2008
IEEE

Formal Modeling of Authentication in SIP Registration

9 years 4 months ago
Formal Modeling of Authentication in SIP Registration
The Session Initiation Protocol (SIP) is increasingly used as a signaling protocol for administrating Voice over IP (VoIP) phone calls. SIP can be configured in several ways so that different functional and security requirements are met. Careless configuration of the SIP protocol is known to lead to a large set of attacks. In this paper we show how SIP can be specified in a protocol centric formal language. Both static analysis and simulations can be performed on the resulting specifications by the recently developed tool PROSA. In particular, we analyze the VoIP architecture of a medium size Norwegian company, and show that several of the well known threats can be found.
Anders Moen Hagalisletto, Lars Strand
Added 01 Jun 2010
Updated 01 Jun 2010
Type Conference
Year 2008
Where SECURWARE
Authors Anders Moen Hagalisletto, Lars Strand
Comments (0)
books