Conclusion

SecSIP is an environment dedicated to protecting SIP services against attacks exploiting vulnerabilities established in protocol specifications and/or specific component implementations. The development of this environment is motivated by the ever-increasing number of vulnerabilities. These vulnerabilities are exploited to target SIP services, which are now being deployed on a massive scale. The timescales required to correct these vulnerabilities are generally long, and often unknown or infinite. Current firewalls are ill-suited to provide this protection, as they do not deal with the semantics of the SIP protocol and its states. The SecSIP environment relies on a stateful language to identify these vulnerabilities and their attacks. This specification language is used to describe these vulnerabilities, the attacks exploiting them, and the countermeasures to prevent the exploit from occurring...