Security Analysis of Session Initiation Protocol - a Methodology Based on Coloured Petri Nets
نویسنده
چکیده
In recent years Voice over Internet Protocol (VoIP) has become a popular multimedia application over the Internet. At the same time critical security issues in VoIP have started to emerge. The Session Initiation Protocol (SIP) is a predominant signalling protocol for VoIP. It is used to establish, maintain and terminate VoIP calls, playing a crucial role in VoIP. This paper is aimed at developing a Coloured Petri Net (CPN)-based approach to analysing security vulnerabilities in SIP, with the ultimate goal of achieving a formal and comprehensive security assessment of SIP specification, and creating a platform for evaluating countermeasures for securing SIP. In the paper we present a method for modelling the behaviour of SIP and its security threats using CPNs, and discuss suitable techniques for analysing the CPNs for investigating SIP security issues. The CPN models and the analysis techniques will then become the platform for analysing the behavior of SIP that is enhanced with proposed security countermeasures.
منابع مشابه
A Coloured Petri Net Methodology and Library for Security Analysis of Network Protocols
Formal methods are often used to prove properties of network protocols, including required security properties. However for a protocol modeller the techniques available for security analysis often require expert knowledge of the technique. Also the tight coupling of protocol model and security attacks limit re-use of models. With Coloured Petri nets as the selected formal method, this paper pro...
متن کاملModelling and Analysis of the INVITE Transaction of the Session Initiation Protocol Using Coloured Petri Nets
The Session Initiation Protocol (SIP) is a control protocol developed by the Internet Engineering Task Force for initiating, modifying and terminating multimedia sessions over the Internet. SIP uses an INVITE transaction to initiate a session. In this paper, we create a Coloured Petri Net (CPN) model for the INVITE transaction. Then we verify the general properties of the INVITE transaction by ...
متن کاملVerification of Session Initiation Protocol Using Timed Colored Petri Net
In this work, Session Initiation Protocol model is established by using Timed Colored Petri Nets (TCPN). SIP (Session Initiation Protocol) is a protocol developed to assist in providing advanced telephony services across the Internet. The Session Initiation Protocol (SIP) has become the quasi-standard for VoiceoverInternet Protocol (VoIP) communications. SIP is based on a client-server infrastr...
متن کاملAnalysing the WAP Class 2 Wireless Transaction Protocol Using Coloured Petri Nets
Coloured Petri nets (CPNs) are used to specify and analyse the Class 2 Wireless Transaction Protocol (WTP). The protocol provides a reliable request/response service to the Session layer in the Wireless Application Protocol (WAP) architecture. When only a single transaction is considered occurrence graph and language analysis reveals 3 inconsistencies between the protocol and service speci cati...
متن کاملAvailability evaluation of Software architecture of object oriented Style using coloured Petri nets
Software architecture is one of the most fundamental products in the process of software development in the areas of behavioral or non- behavioral features like availability or transformability change. There are different ways to evaluate software architecture one of which is the creation of application model. An executable model of software architecture is an official description of architectu...
متن کامل