A New Lightweight Protection Method against Impersonation Attack on SIP

Abstract

Impersonation attack, based on vulnerable authentication of SIP, facilitates an attacker to take malicious actions such as toll fraud and session hijacking. In this paper, we propose a new lightweight protection mechanism against above actions. As soon as an attacker sends a REGISTER message to SIP registrar, it creates a record called binding in a location server. At this point, our proposing mechanism can detect the attacker by just comparing binding with the REGISTER message received from the attacker. Our protection method can easily enhance user authentication of SIP with little overhead.