Automatic Detection Of SIP-Aware Attacks On VoLTE Device

Due to the worldwide deployment of Long Term Evolution(LTE),the fourth-generation(4G)mobile cellular networking technology,cellular network has been shifting away from its circuit-switched legacy towards a packet-switched network that resembles the Internet.To support voice calls over the LTE network,Voice-over-LTE(VoLTE)has been introduced and well developed in past few years.It exploits packet-switched network to provide call services instead of the traditional circuit-switched telephony.Unlike the traditional call setup,VoLTE adopts Session Initiation Protocol(SIP)and processes it at the Application Processor(AP)to achieve some control functions.Therefore,it means some attack techniques against the SIP will also be effective against VoLTE devices.In this paper,we propose a novel device-side SIP-aware detecting system against two kinds of SIP attacks,SIP message data DoS attack and malformed SIP message attack.To detect the SIP message data DoS attack,we set threshold for the traffic of SIP message received from VoLTE interface within one minute.And for the malformed message attack,we provide the structure and formalization rules of SIP messages to detect malformed SIP messages by utilizing ontology descriptions.This paper presents the design and implementation of this detecting system.The simulation test shows that this system will improve the security level of VoLTE service in real applications.