Method for protecting SIP-based applications
AssigneeNEC Corporation
InventorsSaverio Niccolini, Sandra Tartarelli, Roman Schlegel, Marcus Brunner
Life of this patent
Estimating the term…
Abstract
A method for protecting SIP (Session Initiation Protocol)-based applications wherein SIP messages are analyzed and malicious SIP messages that potentially constitute a security risk for the SIP-based application are identified is discloses. Regarding a realization of a particularly high security [level] with means that are easy to implement—a pre-definable number N of pre-configurable parameters—identities—is extracted from the SIP messages and that for each SIP message a comparison of the identities with the identities extracted from previous SIP message is performed, on the base of which a maliciousness level ML is assessed for every SIP message.
Claims25
A method for protecting SIP (Session Initiation Protocol)-based applications wherein SIP messages are analyzed and malicious SIP messages that potentially constitute a security risk for the SIP-based application are identified, the method comprising:
- extracting a pre-definable number N of pre-configurable parameters—identities—from the SIP messages;
- comparing said identities with identities extracted from previous SIP messages for each SIP message;
- and
- assessing a maliciousness level ML on the base of the comparison results for every SIP message.
A system for protecting SIP (Session Initiation Protocol)-based applications in a network including at least one client device and at least one node involved in communication of said at least one client, wherein said at least one node comprises:
- an analyzer for analyzing SIP messages transmitted and/or received by said at least one client device;
- an extractor for extracting a pre-definable number N of pre-configurable parameters—identities—from the SIP messages;
- a comparator for comparing said identities with identities extracted from previous SIP messages for each SIP message;
- and
- an assessing section for assessing a maliciousness level ML on the base of the comparison results for every SIP message.
Dependencies are inferred from the claim text.