Session Initiation Protocol Attacks and Challenges

TL;DR

This paper reviews security issues and attack methods related to the Session Initiation Protocol (SIP), compares authentication schemes, and discusses ongoing challenges and threat taxonomy in SIP security.

Contribution

It provides a comprehensive overview of SIP security challenges, compares existing authentication solutions, and presents a taxonomy of SIP threats, highlighting research gaps.

Findings

Comparison of authentication schemes for SIP

Identification of key security challenges in SIP

Presentation of SIP threat taxonomy

Abstract

In recent years, Session Initiation Protocol (SIP) has become widely used in current internet protocols. It is a text-based protocol much like Hyper Text Transport Protocol (HTTP) and Simple Mail Transport Protocol (SMTP). SIP is a strong enough signaling protocol on the internet for establishing, maintaining, and terminating session. In this paper the areas of security and attacks in SIP are discussed. We consider attacks from diverse related perspectives. The authentication schemes are compared, the representative existing solutions are highlighted, and several remaining research challenges are identified. Finally, the taxonomy of SIP threat will be presented.