IMS security

Anderlind, E.; Faucher, David; Grosse, E. H.; Heer, Daniel N.; McGee, Andrew R.; Strand, David P.; Thornberry, Robert J.

doi:10.1002/bltj.20143

Cited by 6 publications

(4 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…where the parameter  is the tolerance parameter which reflects the resistance to the attacks and malfunctions, According to the actual situation, (0) k L is calculated by Eq. (14) and the capacity k C of node k is calculated by Eq. (15) in our simulations.…”

Section: R R Rmentioning

confidence: 99%

“…Furthermore, the vulnerability of IP multimedia subsystem implementations and high level service provider security demands were examined. And then an implementation method to provide the desired degree of safety for IP multimedia subsystem deployments was defined [14]. Considering that communications service provider must determine how to handle the influences of security flaws, a new method was emphasized in reference [15], with examples to determine the influence of safety-related malfunctions and the key design elements which are related with modeling service reliability.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Vulnerability Evaluation of Multimedia Subsystem Based on Complex Network

Tang¹

2013

JMM

View full text Add to dashboard Cite

IP multimedia subsystems bring huge security threats to the IMS-based next-generation networks although they bring IMS-based network integration and business ability enhancement. Therefore, the research on the vulnerability of IP multimedia subsystems attracts widespread attention recently. In this article, the security threats of next-generation core networks are discussed first. And then we analyze the vulnerability characteristics of IP multimedia subsystems. In order to evaluate the vulnerability of IP multimedia subsystems effectively, this paper further applies the complex network theory to construct the network model of IP multimedia subsystem and propose the vulnerability assessment indicator by adopting entropy model. Finally, some simulation experiments and result analysis are provided to our evaluation model. Both theoretical analysis and numerical simulations indicate that the proposed vulnerability measurement is a simple and effective new method to evaluate the overall vulnerability of this kind of IP multimedia subsystems. In addition, the proposed method provides a new idea and scientific basis for the vulnerability assessment of IP multimedia subsystems

show abstract

Section: R R Rmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Vulnerability Evaluation of Multimedia Subsystem Based on Complex Network

Tang¹

2013

JMM

View full text Add to dashboard Cite

show abstract

“…3GPP2 [14] and 3GPP [15] proposed solutions for IP-based services of IMS. Researchers at Bell Labs [16] examined the threats and vulnerabilities of IMS implementations. Several companies also provided their security solutions for IMS in 3G networks [17] [18].…”

Section: Related Workmentioning

confidence: 99%

A Chain Reaction DoS Attack on 3G Networks: Analysis and Defenses

et al. 2009

View full text Add to dashboard Cite

The IP Multimedia Subsystem (IMS) is being deployed in the Third Generation (3G) networks since it supports many kinds of multimedia services. However, the security of IMS networks has not been fully examined. This paper presents a novel DoS attack against IMS. By congesting the presence service, a core service of IMS, a malicious attack can cause chained automatic reaction of the system, thus blocking all the services of IMS. Because of the low-volume nature of this attack, an attacker only needs to control several clients to paralyze an IMS network supporting one million users. To address this DoS attack, we propose an online early defense mechanism, which aims to first detect the attack, then identify the malicious clients, and finally block them. We formulate this problem as a change-point detection problem, and solve it based on the non-parametric GRSh test. Through trace-driven experiments, we demonstrate that our defense mechanism can throttle this DoS attack within a short defense time window while generating few false alarms.

show abstract

“…The concept of pseudo identity provides much-needed privacy, confidentiality and security for all user service transactions. This infrastructure is also required for providing secure transactions that can easily be enhanced with evolving technologies such as IP Multimedia System (IMS), Web service and single sign-on (SSO) (The subject of security in the IMS architecture is discussed more fully in [10]). …”

Section: Wireless Operator Differentiatorsmentioning

confidence: 99%

Security architecture for IP-based multi-service networks

Balyan

Loganathan²,

Sripathi

2006

Bell Labs Tech. J.

View full text Add to dashboard Cite

The telecommunications industry's transition to Internet Protocol (IP)-Scandinavian countries, the wireless penetration rate has reached 100% [21]. The acceptance of an Internet-based service model is the only way to provide differentiated services and to increase the average revenue per user (ARPU) in an almost saturated market. Operators are focused on providing contentrich; presence-and location-based personalized services to their customers, and ring tone downloads have provided a strong indication that media will rule the new age.Given the increasing need for access to these burgeoning services, security has become a key consideration for all parties involved: end users, service providers and network operators. In current implementations, referring to a network as "secure" implies that it can protect itself from an attack on its systems. IntroductionA massive overhaul of the telecommunications industry landscape occurred during the last decade, as some global behemoths of the previous century became marginal players or even ceased to exist. The evolution and mass acceptance of the Internet, the liberalization of the telecommunications industry, and the shifting focus from voice-to data-centric services accelerated this change.This millennium has seen the growth of the Internet and wireless in tandem. The now-ubiquitous Internet has become a dominant force in our lives. E-Commerce, e-government, media-casting, knowledge-sharing, and e-communication are striking examples of the evolutionary nature of the Internet. At the same time, wireless has actually surpassed fixed-line penetration in a few countries. In some The attack, active or passive, may involve eavesdropping, content alteration, interruption or any undesired action during and after a transaction. Common types of attacks include denial-of-service, masquerade, man-in-the-middle, and replay [9,15,16].To cope with these attacks, the industry has devised a number of mechanisms to provide secure services. These include data encryption; the implementation of a public key infrastructure (PKI) to provide a common, uniform and interoperable mechanism for sharing the keys; the use of transport layer security such as Internet Protocol security (IPSec); and the deployment of authentication, authorization and accounting (AAA) servers for user authentication

show abstract

IMS security

Cited by 6 publications

References 12 publications

Vulnerability Evaluation of Multimedia Subsystem Based on Complex Network

Vulnerability Evaluation of Multimedia Subsystem Based on Complex Network

A Chain Reaction DoS Attack on 3G Networks: Analysis and Defenses

Security architecture for IP-based multi-service networks

Contact Info

Product

Resources

About