{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T20:40:31Z","timestamp":1759092031574},"reference-count":38,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2012,12,27]],"date-time":"2012-12-27T00:00:00Z","timestamp":1356566400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Knowl Inf Syst"],"published-print":{"date-parts":[[2014,2]]},"DOI":"10.1007\/s10115-012-0595-5","type":"journal-article","created":{"date-parts":[[2012,12,25]],"date-time":"2012-12-25T22:56:20Z","timestamp":1356476180000},"page":"491-510","source":"Crossref","is-referenced-by-count":19,"title":["Securing SIP-based VoIP infrastructure against flooding attacks and Spam Over IP Telephony"],"prefix":"10.1007","volume":"38","author":[{"given":"Muhammad Ali","family":"Akbar","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Muddassar","family":"Farooq","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2012,12,27]]},"reference":[{"key":"595_CR1","doi-asserted-by":"crossref","unstructured":"Akbar M, Farooq M (2009) Application of evolutionary algorithms in detection of sip based flooding attacks. In: Proceedings of the 11th annual conference on genetic and evolutionary computation. ACM, pp 1419\u20131426","DOI":"10.1145\/1569901.1570092"},{"key":"595_CR2","doi-asserted-by":"crossref","unstructured":"Akbar M, Tariq Z, Farooq M (2008) A comparative study of anomaly detection algorithms for detection of SIP flooding in IMS. In: International conference on IP multimedia subsystem architecture and applications","DOI":"10.1109\/IMSAA.2008.4753934"},{"key":"595_CR3","doi-asserted-by":"crossref","unstructured":"Branch J, Giannella C, Szymanski B, Wolff R, Kargupta H (2012) In-network outlier detection in wireless sensor networks. Knowl Inf Syst, pp 1\u201332. doi: 10.1007\/s10115-011-0474-5","DOI":"10.1007\/s10115-011-0474-5"},{"key":"595_CR4","doi-asserted-by":"crossref","unstructured":"Chaisamran N, Okuda T, Blanc G, Yamaguchi S (2011) Trust-based voip spam detection based on call duration and human relationships. In: Applications and the internet (SAINT), 2011 IEEE\/IPSJ 11th international symposium on. IEEE, pp 451\u2013456","DOI":"10.1109\/SAINT.2011.84"},{"key":"595_CR5","doi-asserted-by":"crossref","unstructured":"Chen Z, Wen W, Yu D (2012) Detecting sip flooding attacks on ip multimedia subsystem (ims). In: Computing, networking and communications (ICNC), 2012 international conference on. IEEE, pp 154\u2013158","DOI":"10.1109\/ICCNC.2012.6167401"},{"issue":"3","key":"595_CR6","doi-asserted-by":"crossref","first-page":"189","DOI":"10.1504\/IJSN.2009.027344","volume":"4","author":"S Ehlert","year":"2009","unstructured":"Ehlert S, Rebahi Y, Magedanz T (2009) Intrusion detection system for denial-of-service flooding attacks in sip communication networks. Int J Secur Netw 4(3):189\u2013200","journal-title":"Int J Secur Netw"},{"key":"595_CR7","unstructured":"Fawcett T (2004) ROC graphs: notes and practical considerations for researchers. Mach Learn 31:1\u201338"},{"key":"595_CR8","doi-asserted-by":"crossref","unstructured":"Geneiatakis D, Vrakas N, Lambrinoudakis C (2009) Performance evaluation of a flooding detection mechanism for voip networks. In: Systems, signals and image processing, 2009. IWSSIP 2009. 16th international conference on. IEEE, pp 1\u20135","DOI":"10.1109\/IWSSIP.2009.5367698"},{"key":"595_CR9","doi-asserted-by":"crossref","unstructured":"Gundecha P, Barbier G, Liu H (2011) Exploiting vulnerability to secure user privacy on a social networking site. In: Proceedings of the 17th ACM SIGKDD international conference on knowledge discovery and data mining. ACM, pp 511\u2013519","DOI":"10.1145\/2020408.2020489"},{"key":"595_CR10","unstructured":"Ipoque (2007) Internet study 2007. http:\/\/www.ipoque.com\/resources\/internet-studies\/internet-study-2007"},{"key":"595_CR11","doi-asserted-by":"crossref","unstructured":"Jung T, Martin S, Ernst D, Leduc G (2012) Sprt for spit: using the sequential probability ratio test for spam in voip prevention. Dependable Netw Serv 7279:74\u201385","DOI":"10.1007\/978-3-642-30633-4_10"},{"key":"595_CR12","unstructured":"Keromytis A (2011) A comprehensive survey of voice over ip security research. Commun Surv Tutor IEEE (99):1\u201324"},{"issue":"5","key":"595_CR13","first-page":"347","volume":"8","author":"G Kumar","year":"2011","unstructured":"Kumar G, Rahul A, Joonuthula K (2011) Voip flood detection using jacobson fast and hellinger distance algorithms. J Commun Comput 8(5):347\u2013353","journal-title":"J Commun Comput"},{"key":"595_CR14","doi-asserted-by":"crossref","unstructured":"Liu L (2011) Uncovering sip vulnerabilities to dos attacks using coloured petri nets. In: Trust, security and privacy in computing and communications (TrustCom), 2011 IEEE 10th international conference on. IEEE, pp 29\u201336","DOI":"10.1109\/TrustCom.2011.8"},{"key":"595_CR15","doi-asserted-by":"crossref","first-page":"216","DOI":"10.1145\/321033.321035","volume":"7","author":"M Maron","year":"1960","unstructured":"Maron M, Kuhns J (1960) On relevance, probabilistic indexing and information retrieval. J Assoc Comput Mach 7:216\u2013244","journal-title":"J Assoc Comput Mach"},{"key":"595_CR16","doi-asserted-by":"crossref","unstructured":"McCue C (2011) Operational security analytics: doing more with less. In: Proceedings of the 17th ACM SIGKDD international conference on knowledge discovery and data mining. ACM, pp 782\u2013782","DOI":"10.1145\/2020408.2020540"},{"key":"595_CR17","unstructured":"McGann S, Sicker D (2005) An analysis of security threats and tools in SIP-based VoIP systems. In: Second VoIP security workshop"},{"key":"595_CR18","doi-asserted-by":"crossref","unstructured":"Nassar M, State R, Festor O (2008) Monitoring sip traffic using support vector machines. In: RAID \u201908: Proceedings of the 11th international symposium on recent advances in intrusion detection. Springer, Berlin, Heidelberg, pp 311\u2013330","DOI":"10.1007\/978-3-540-87403-4_17"},{"key":"595_CR19","doi-asserted-by":"crossref","unstructured":"Ono K, Schulzrinne H (2009) Have i met you before?: using cross-media relations to reduce spit. In: Proceedings of the 3rd international conference on principles, systems and applications of IP telecommunications. ACM, p 3","DOI":"10.1145\/1595637.1595641"},{"key":"595_CR20","doi-asserted-by":"crossref","unstructured":"Ormazabal G, Nagpal S, Yardeni E, Schulzrinne H (2008) Secure SIP: a scalable prevention mechanism for DoS attacks on SIP based VoIP systems. In: Principles, systems and applications of IP telecommunications. Services and security for next generation networks, vol 5310. Springer, Heidelberg, pp 107\u2013132","DOI":"10.1007\/978-3-540-89054-6_6"},{"key":"595_CR21","unstructured":"Packet vs flow-based anomaly detection (n.d.). Whitepaper, ESPHION Network Disaster Protection"},{"key":"595_CR22","doi-asserted-by":"crossref","unstructured":"Pham D-S, Saha B, Phung D, Venkatesh S (2012) Detection of cross-channel anomalies. Knowl Inf Syst, pp 1\u201327. doi: 10.1007\/s10115-012-0509-6","DOI":"10.1007\/s10115-012-0509-6"},{"key":"595_CR23","volume-title":"C4.5: programs for machine learning","author":"J Quinlan","year":"1993","unstructured":"Quinlan J (1993) C4.5: programs for machine learning. Morgan Kaufmann, Los Altos"},{"issue":"2","key":"595_CR24","first-page":"114","volume":"1","author":"J Quittek","year":"2006","unstructured":"Quittek J, Niccolini S, Tartarelli S, Schlegel R (2006) Prevention of Spam over IP Telephony (SPIT). NEC Tech J 1(2):114\u2013119","journal-title":"NEC Tech J"},{"key":"595_CR25","volume-title":"Spam prevention in voice over IP networks","author":"T Radermacher","year":"2005","unstructured":"Radermacher T (2005) Spam prevention in voice over IP networks. University of Salzburg, Salzburg"},{"key":"595_CR26","doi-asserted-by":"crossref","unstructured":"Rafique M, Ali Akbar M, Farooq M (2009) Evaluating dos attacks against sip-based voip systems. In: Global telecommunications conference, 2009. GLOBECOM 2009, IEEE. IEEE, pp 1\u20136","DOI":"10.1109\/GLOCOM.2009.5426247"},{"key":"595_CR27","unstructured":"SANS-Institute (2007) SANS Top-20 2007 security risks. http:\/\/www.sans.org\/top20\/"},{"key":"595_CR28","doi-asserted-by":"crossref","unstructured":"Sengar H, Wang H, Wijesekera D, Jajodia S (2006) Fast detection of denial-of-service attacks on ip telephony. In: Quality of service, 2006. IWQoS 2006. 14th IEEE international workshop on. IEEE, pp 199\u2013208","DOI":"10.1109\/IWQOS.2006.250469"},{"issue":"6","key":"595_CR29","doi-asserted-by":"crossref","first-page":"794","DOI":"10.1109\/TPDS.2007.70786","volume":"19","author":"H Sengar","year":"2008","unstructured":"Sengar H, Wang H, Wijesekera D, Jajodia S (2008) Detecting VoIP floods using the Hellinger distance. IEEE Trans Parallel Distrib Syst 19(6):794\u2013805","journal-title":"IEEE Trans Parallel Distrib Syst"},{"key":"595_CR30","doi-asserted-by":"crossref","unstructured":"Sengar H, Wang X, Nichols A (2011) Thwarting spam over internet telephony (spit) attacks on voip networks. In: Quality of Service (IWQoS), 2011 IEEE 19th international workshop on. IEEE, pp 1\u20133","DOI":"10.1109\/IWQOS.2011.5931335"},{"issue":"5","key":"595_CR31","doi-asserted-by":"crossref","first-page":"26","DOI":"10.1109\/MNET.2006.1705880","volume":"20","author":"D Sisalem","year":"2006","unstructured":"Sisalem D, Kuthan J, Ehlert S, Fokus F (2006) Denial of service attacks targeting a SIP VoIP infrastructure: attack scenarios and prevention mechanisms. IEEE Netw 20(5):26\u201331","journal-title":"IEEE Netw"},{"key":"595_CR32","doi-asserted-by":"crossref","unstructured":"Tang J, Cheng Y, Zhou C (2009) Sketch-based sip flooding detection using hellinger distance. In: Global telecommunications conference, 2009. GLOBECOM 2009, IEEE. IEEE, pp 1\u20136","DOI":"10.1109\/GLOCOM.2009.5426267"},{"key":"595_CR33","unstructured":"Thandeeswaran R, Asha A et al (2012) Novel survey on detection of ddos attack using traceback technique in voip networks. Int J Math Arch (IJMA) 2(12):2712\u20132720"},{"key":"595_CR34","unstructured":"The-VoIP-Network (2008) VoIP market trends. http:\/\/www.the-voip-network.com\/voipmarket.html\/"},{"key":"595_CR35","doi-asserted-by":"crossref","unstructured":"Vaidya J, Yu H, Jiang X (2008) Privacy-preserving svm classification. Knowl Inf Syst 14:161\u2013178. doi: 10.1007\/s10115-007-0073-7","DOI":"10.1007\/s10115-007-0073-7"},{"key":"595_CR36","volume-title":"Data mining: practical machine learning tools and techniques","author":"I Witten","year":"2005","unstructured":"Witten I, Frank E (2005) Data mining: practical machine learning tools and techniques, 2nd edn. Morgan Kaufmann, Los Altos","edition":"2"},{"key":"595_CR37","doi-asserted-by":"crossref","unstructured":"Wu Y, Bagchi S, Singh N, Wita R (2009) Spam detection in voice-over-ip calls through semi-supervised clustering. In: Dependable systems & networks, 2009. DSN\u201909. IEEE\/IFIP international conference on. IEEE, pp 307\u2013316","DOI":"10.1109\/DSN.2009.5270323"},{"key":"595_CR38","doi-asserted-by":"crossref","unstructured":"Yang B, Sato I, Nakagawa H (2011) Secure clustering in private networks. In: Data mining (ICDM), 2011 IEEE 11th international conference on. IEEE, pp 894\u2013903","DOI":"10.1109\/ICDM.2011.127"}],"container-title":["Knowledge and Information Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10115-012-0595-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10115-012-0595-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10115-012-0595-5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,7]],"date-time":"2019-07-07T11:38:28Z","timestamp":1562499508000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10115-012-0595-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,12,27]]},"references-count":38,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2014,2]]}},"alternative-id":["595"],"URL":"https:\/\/doi.org\/10.1007\/s10115-012-0595-5","relation":{},"ISSN":["0219-1377","0219-3116"],"issn-type":[{"value":"0219-1377","type":"print"},{"value":"0219-3116","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,12,27]]}}}