• VeTo: An Exploit Prevention La...

Result: VeTo: An Exploit Prevention Language from Known Vulnerabilities in SIP Services

Title:
VeTo: An Exploit Prevention Language from Known Vulnerabilities in SIP Services
Authors:
Lahmadi, Abdelkader, Festor, Olivier
Contributors:
Management of dynamic networks and services (MADYNES), INRIA Lorraine, Institut National de Recherche en Informatique et en Automatique (Inria)-Institut National de Recherche en Informatique et en Automatique (Inria)-Laboratoire Lorrain de Recherche en Informatique et ses Applications (LORIA), Institut National de Recherche en Informatique et en Automatique (Inria)-Université Henri Poincaré - Nancy 1 (UHP)-Université Nancy 2-Institut National Polytechnique de Lorraine (INPL)-Centre National de la Recherche Scientifique (CNRS)-Université Henri Poincaré - Nancy 1 (UHP)-Université Nancy 2-Institut National Polytechnique de Lorraine (INPL)-Centre National de la Recherche Scientifique (CNRS), IEEE
Source:
IEEE/IFIP Network Operations and Management Symposium - NOMS 2010. :216-223
Publisher Information:
CCSD; IEEE, 2010.
Publication Year:
2010
Collection:
collection:CNRS
collection:INRIA
collection:INPL
collection:INRIA-LORRAINE
collection:LORIA2
collection:INRIA-NANCY-GRAND-EST
collection:TESTALAIN1
collection:UNIV-LORRAINE
collection:INRIA2
collection:LORIA
collection:AM2I-UL
Subject Terms:
Prevention, Language, Vulnerability, SIP, SecSIP, VeTo, ACM: C.: Computer Systems Organization, C.2: COMPUTER-COMMUNICATION NETWORKS, C.2.3: Network Operations, C.2.3.0: Network management, [INFO.INFO-NI]Computer Science [cs], Networking and Internet Architecture [cs.NI]
Subject Geographic:
Osaka, Japan
Original Identifier:
HAL:
Document Type:
Conference conferenceObject<br />Conference papers
Language:
English
Relation:
info:eu-repo/semantics/altIdentifier/doi/10.1109/NOMS.2010.5488464
DOI:
10.1109/NOMS.2010.5488464
Access URL:
https://inria.hal.science/inria-00544976
https://inria.hal.science/inria-00544976v1/document
https://inria.hal.science/inria-00544976v1/file/PID1075963.pdf
Rights:
info:eu-repo/semantics/OpenAccess
Accession Number:
edshal.inria.00544976v1
Database:
HAL

Further Information

We present VeTo a language to specify protection rules for VoIP systems, supported by the SecSip prevention framework. VeTo offers a unique way to specify both vulnerabil- ities and countermeasures to protect SIP services against known vulnerabilities. We illustrate the applicability of the language through the specification of several known attacks and assess its efficiency through a target testbed.