Paper Details

The session initiation protocol (SIP) is widely used for controlling multimedia communication session over theinternet protocol. Denial of service attacks are the main concern causing loss of multimedia availability. Its impact rangesfrom decreasing of service level to complete loss of service. Effectively detecting a flooding attack to the SIP proxy server iscritical to ensure robust multimedia communication session over the internet. The existing SIP flooding detection schemesare either anomaly based or misuse based. The anomaly based detection scheme uses Hellinger Distance algorithm (HD),Cumulative Sum algorithm (CUSUM), Adaptive Threshold algorithm, etc to detect anomaly. The anomaly based scheme candetect unknown attack it does not need the prior knowledge of the attack, but it generates some false alarm, suffers fromaccuracy problem and gives false positive. Similarly the misuse based scheme uses Weighted Sum algorithm (WSUM),Expression matching method for the detection. These algorithms have high detection accuracy, no false positive but it cannotdetect unknown attack. To overcome problems in both SIP flooding detection schemes a Hybrid detection scheme isproposed. The proposed Hybrid scheme consist features of both anomaly based scheme and misuse based scheme, and itgives fast response, increase accuracy of detection and no false alarm.

Sinju N S, Ranjini Ramachandran, Amrutha H Hingmire, “Denial of Service Flooding Attack Protection Mechanism in Session Initiation protocol By Hybrid Detection Algorithm”, International Journal of Advance Engineering and Research Development (IJAERD), Vol. 3, Issue 12, pp. 395-402, December 2016.