Strengthening Security of Ip Multimedia Subsystem

IP Multimedia Subsystem (IMS) is defined by 3GPP/3GPP2 and has become as a major part of the next-generation networks (NGN) service delivery platform. IMS provides convergence of two most successful communication paradigms – data networks (the Internet) and cellular networks on IP based infrastructure. Such platform allows an easy development of new value added and multimedia services. Open architecture of IMS brings big challenges in privacy and security. The 3GPP standards already specify such security solutions like authentication, key agreement and Transport Layer Security (TLS), but IMS is still vulnerable to several attacks in their services, like VoIP or multimedia conferences. There is still a risk to flooding attacks, DoS and DDoS attacks, because IMS used protocols (Session Initiation Protocol, Diameter Protocol, Media Streaming and Internet protocol) are fully opened and can be easy accessed from intruders. This paper focuses on a possibility to minimize the potential risks of IMS, by integrating intrusion detection and prevention system (IDS/IPS). The experimental tests are performed on OpenIMS Core on different type of flooding, spoofing and DoS attacks.