Exploiting SIP for botnet communication

摘要: The Session Initiation Protocol (SIP) implements methods for generic service discovery and versatile messaging. It is, therefore, expected to be a key component in many telecommunication Internet services. For example, the 3GPP IP Multimedia Subsystem relies heavily on SIP. Given its critical role, ensuring security of SIP is clearly crucial task. In this paper, we analyze protocol show that it can easily exploited mount effective large-scale botnets. We do by scrutinizing details how offers variety ways conceal botnet traffic within legitimate-looking traffic. Using our analysis, implement bot present experimental results from real testbed network. addition, employ statistics collected large provider discuss implications both design detection. Finally, software tool (called autosip) generate synthetic resembles actual with different controllable characteristics. proposed quite useful researchers working area who may not have access dumps providers.