ASIC Design and Implementation for VoIP Intrusion Detection /Prevention

• Main Authors: Hsin-chen Lin, 林信成
• Other Authors: Yuan-san Chu
• Format: Others
• Language: zh-TW
• Published: 2009
• Online Access: http://ndltd.ncl.edu.tw/handle/07521251455768490642

碩士 === 國立中正大學 === 電機工程所 === 97 === With pervasion and rapid growth of Internet , the requirements of transmitting Multimedia data on IP network have become larger and larger . VoIP ( Voice over IP ) is one of killer applications in Internet , even it will replace PSTN in the future. Because of scalability、openness and simple format，SIP has become the most important signaling protocol for VoIP . Due to SIP is a plaintext format ,it will face many additional threats. Well-known antivirus software “Mcafee Avert Labs” published an article by” McAfee Avert Labs Top 10 Threat Predictions for 2008”, forecasting VoIP Vulnerabilities in 2008 than the 50 percent over 2007, and it pointed out that VoIP technology is still very progressive, but the VoIP defense strategies is lagging far behind.Therefore, the issue of VoIP security is a very serious problem. In this paper, the attack can be detected “Spoofing Attack”, “SIP Flooding Attack”, “Call Hijacking Attack” .. etc. We defense the above attack such as “Stateful Protocol Analysis”. “Stateful Protocol Analysis” most can detect abnormal behavior protocol. We increase the overall throughput for “Stateful Protocol Analysis”, so we increased Traffic Filter, it can be filter out a large number of normal packets in TCP/IP layer. And the entire VoIP IDPS (Intrusion Detection / Prevention System) to enhance the overall throughput and reached a parallel processing in ASIC.