Billing attacks on SIP-based VoIP systems

摘要: Billing is fundamental to any commercial VoIP services and it has direct impact on each individual subscriber. One of the most basic requirements billing function that must be reliable trustworthy. From subscriber's perspective, should only charge them for calls they have really made duration called. Existing based signaling. Therefore, vulnerability in signaling a potential billing. In this paper, we examine how vulnerabilities SIP can exploited compromise reliability trustworthiness SIP-based systems. Specifically, focus attacks will create inconsistencies between what subscribers received service providers provided. We present four could result charges not or overcharges made. Our experiments show Vonage AT&T are vulnerable these attacks.