|
ABSTRACT
Today, Peer-to-Peer SIP based communication systems have attracted much attention from both academia and industry. The decentralized nature of P2P might provide the distributed peer-to-peer communication system without help of the traditional SIP server. However, it comes to the cost of reduced manageability and therefore causes security problems, e.g. distrust, privacy leaks, unpredictable availability, etc. In this paper, we investigate on P2PSIP security issues and propose a proxy-based system architecture that improves security during P2PSIP session initiation. The main issues considered in this architecture include Source inter-working, Encryption & Decryption, Policy Management, Destination inter-working, etc. We also implement a prototype with 16 Chord Secure Proxys (CSPs) and 496 P2PSIP peers. After that we analyze this system architecture in several aspects: number of hops and delay, trust upgrading, and the protection of security breaches (e.g. malicious or compromised intermediate peer). We take Chord as the P2PSIP overlay as example. However, this system architecture is independent of Chord overlay and could be extended to the other DHT (Distributed Hash Table) technologies.
REFERENCES
Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.
 |
1
|
|
| |
2
|
|
| |
3
|
P2PSIP. p. http://www.p2psip.org.
|
| |
4
|
C. Jennings, B. Lowekamp, E. Rescorla, S. Baset, H. Schulzrinne, REsource LOcation And Discovery (RELOAD). draft-bryan-p2psip-reload-04, June, 2008.
|
| |
5
|
Frank Dabek , Jinyang Li , Emil Sit , James Robertson , M. Frans Kaashoek , Robert Morris, Designing a DHT for low latency and high throughput, Proceedings of the 1st conference on Symposium on Networked Systems Design and Implementation, p.7-7, March 29-31, 2004, San Francisco, California
|
| |
6
|
David A. Bryan, P. Matthews, E. Shim, D. Willis, S. Dawkins, Concepts and Terminology for Peer to Peer SIP. draft-ietf-p2psip-concepts-02, July, 2008.
|
| |
7
|
G. Camarillo, P.Nikander, J. Hautakorpi, HIP BONE: Host Identity Protocol (HIP) Based Overlay Networking Environment. draft-camarillo-hip-bone-01, Feb, 2008.
|
| |
8
|
David A. Bryan, Bruce B. Lowekamp, Marcia Zangrilli, The Design of a Versatile, Secure P2PSIP Communications Architecture for the Public Internet, in IEEE International Symposium on Parallel and Distributed Processing, IPDPS. April, 2008.
|
| |
9
|
Marcin Matuszewski, E. Kokkonen, Mobile P2PSIP--Peer-to-Peer SIP Communication in Mobile Communities, in 5th IEEE Consumer Communications and Networking Conference. Jan. 2008.
|
 |
10
|
David Karger , Eric Lehman , Tom Leighton , Rina Panigrahy , Matthew Levine , Daniel Lewin, Consistent hashing and random trees: distributed caching protocols for relieving hot spots on the World Wide Web, Proceedings of the twenty-ninth annual ACM symposium on Theory of computing, p.654-663, May 04-06, 1997, El Paso, Texas, United States
[doi> 10.1145/258533.258660]
|
 |
11
|
|
| |
12
|
XingFeng Jiang, H. Zheng, C. Macian, V. Pascual, Service Extensible P2P Peer Protocol. draft-jiang-p2psip-sep-01, Feb, 2008.
|
| |
13
|
Apache Derby. p. http://db.apache.org/derby/.
|
| |
14
|
Wireshark: Go deep.: p. http://www.wireshark.org/.
|
| |
15
|
|
| |
16
|
Vladimir Oleshchuk, Trust-based Framework for Security Enhancement of Wireless Sensor Networks, in 4th IEEE Workshop on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS 2007) Sep, 2007.
|
| |
17
|
Xianghan Zheng, Vladimir Oleshchuk, Trust-based Framework for Security Enhancement of P2PSIP Communications Systems, 4th International Conference for Internet Technology and Secured Transaction (ICITST-2009) Nov, 2009.
|
| |
18
|
|
| |
19
|
Xianghan Zheng, Vladimir Oleshchuk, Hongzhi Jiao, A System Architecture for SIP/IMS-based Multimedia Services in International Joint Conferences on Computer, Information, and Systems Sciences, and Engineering (CISSE). Dec, 2007.
|
|