https://nmsl.cs.sfu.ca/index.php?action=history&feed=atom&title=Private%3Asip_botnet 2026-04-05T11:06:57Z Revision history for this page on the wiki MediaWiki 1.35.1 https://nmsl.cs.sfu.ca/index.php?title=Private:sip_botnet&diff=4297&oldid=prev 2011-03-19T20:43:52Z

<p>New page: &#039;&#039;&#039;Detection of Botnets Mounted on the Session Initiation Protocol&#039;&#039;&#039; Botnet is a group of compromised computers (called bots) controlled by remote attackers to distribute Spam emails, l...</p> <p><b>New page</b></p><div><br /> '''Detection of Botnets Mounted on the Session Initiation Protocol'''<br /> <br /> Botnet is a group of compromised computers (called bots) controlled by remote attackers to distribute<br /> Spam emails, launch denial of service attacks, and perform other malicious activities. Botnets can be<br /> deployed on top of different protocols, such as Internet Relay Chat (IRC), Hyper Text Transfer Protocol<br /> (HTTP), and Session Initiation Protocol (SIP). SIP is widely used to initiate voice over IP sessions, and<br /> it has been recently adopted by the telecommunications standards bodies to be the signaling protocol<br /> for mobile telecommunication core networks. Such adoption will introduce a huge number of potential<br /> devices to botnets. Therefore, botnets deployed over SIP present a serious threat for the Internet. We<br /> propose a novel approach to detect SIP botnets by looking for users who behave in similar and coordinated<br /> patterns. We show through extensive experimental evaluations that the proposed approach achieves low<br /> false positive and false negative rates.<br /> <br /> == References and Links == <br /> *</div>

Mhefeeda