IP Library › Granted Patent US 9,473,529
Granted Patent B2
US 9,473,529 · App. 11/557,739 · Granted Oct 18, 2016

Prevention of denial of service (DoS) attacks on session initiation protocol (SIP)-based systems using method vulnerability filtering

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,473,529
App. No.
11/557,739
Granted
Oct 18, 2016
Kind
B2
Abstract

A device receives an attack on a Session Initiation Protocol (SIP) based device, and applies, based on a type of the attack, a method vulnerability based filter to the attack.

Claims (20)

1. A device comprising:

a receiver that receives Session Initiation Protocol (SIP) messages;

processing logic to:

associate a transaction identifier (ID) with each of one or more of the received SIP messages, and

identify SIP messages associated with a same transaction ID and to reject SIP messages associated with the same transaction ID when a rate of the SIP messages associated with the same transaction ID exceeds a threshold;

a transmitter to send the received SIP messages not rejected by the processing logic; and

a content-addressable memory (CAM) for storing information indicative of the transaction ID and the SIP messages, wherein the processing logic identifies the SIP messages associated with the same transaction ID by querying the CAM.

2. A method comprising:

receiving Session Initiation Protocol (SIP) messages for creating, modifying, or terminating communication sessions;

associating a transaction identifier (ID) with each of one or more of the received SIP messages;

rejecting the SIP messages associated with a same transaction ID when a rate or a number of the SIP messages associated with the same transaction ID exceeds a threshold;

forwarding the received SIP messages when the rate or the number of the SIP messages associated with the same transaction ID does not exceed the threshold; and

querying a content-addressable memory (CAM) for storing information indicative of the transaction ID and SIP messages to identify the SIP messages associated with the same transaction ID.

3. A method of comprising:

receiving Session Initiation Protocol (SIP) messages for creating, modifying, or terminating communication sessions;

associating a transaction identifier (ID) with each of one or more of the received SIP messages;

rejecting the SIP messages associated with a same transaction ID when a rate or a number of the SIP messages associated with the same transaction ID exceeds a threshold;

forwarding the received SIP messages when the rate or the number of the SIP messages associated with the same transaction ID does not exceed the threshold; and

querying a content-addressable memory (CAM) for storing information indicative of the transaction ID and SIP messages to identify the SIP messages associated with the same transaction ID,

wherein the information indicative of the transaction ID is a fixed length and not dependent on a length of the transaction ID.