PROJECT TITLE :

Capture and Analysis of Malicious Traffic in VoIP Environments Using a Low Interaction Honeypot

ABSTRACT:

The quantity of users of VoIP services is increasing each year. Consequently, VoIP systems get additional engaging for attackers. This paper describes the implementation of an occasional interaction honeypot for monitoring illegal activities in VoIP environments. The honeypot operated throughout ninety two days and collected 3502 events connected to the SIP protocol. The analysis of the results permits understanding the modus operandi of the attacks targeted to VoIP infrastructures. These results may be used to boost defense mechanisms like firewalls and Intrusion Detection Systems.