SIP-DDoS: SIP Framework for DDoS Intrusion Detection based on Recurrent Neural Networks - École nationale supérieure Mines-Télécom Lille Douai
Communication Dans Un Congrès Année : 2023

SIP-DDoS: SIP Framework for DDoS Intrusion Detection based on Recurrent Neural Networks

Résumé

The rapid evolution of beyond fifth-generation (B5G) and sixth-generation (6G) networks has significantly driven the growth of Internet of Things (IoT) applications. These applications are characterised by: a massive connectivity, high security level, trust, wireless coverage, also ultra-low latency, high throughput, and ultra-reliability, especially for real-time oriented sessions or sensor like cameras. While traditional protocols like MQTT and CoAP are inadequate for such types of applications, under certain conditions, the 3GPP standard Session Initiation Protocol (SIP) emerges as a promising solution. However, SIP faces various Distributed Denial of Service (DDoS) threats, as INVITE flooding attacks presenting a significant challenge. This work presents a GRUbased Intrusion Detection System (IDS) to detect SIP-INVITE flooding attacks. Leveraging recurrent neural networks, the IDS efficiently process sequential SIP traffic data in real time, identifying attack patterns effectively. The GRU's ability to capture temporal dependencies enhances accuracy in classifying and detecting attack behaviors. The results demonstrate that the framework can effectively detect and mitigate INVITE flooding attacks of different intensities, under practical settings. The performance results show that the proposed framework is robust and can be practically deployed, e.g., inference time less than 800 µs and a marginal rate for the misclassified traffic.
Fichier principal
Vignette du fichier
Springer_Lecture_Notes_in_Computer_Science_V01.pdf (382.28 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04256565 , version 1 (24-10-2023)
hal-04256565 , version 2 (24-11-2023)

Identifiants

  • HAL Id : hal-04256565 , version 2

Citer

Oussama Sbai, Benjamin Allaert, Patrick Sondi, Ahmed Meddahi. SIP-DDoS: SIP Framework for DDoS Intrusion Detection based on Recurrent Neural Networks. International Conference on Machine Learning for Networking, Oct 2023, Paris, France. ⟨hal-04256565v2⟩
419 Consultations
306 Téléchargements

Partager

More