{"id":"https://openalex.org/W2122220160","doi":"https://doi.org/10.1109/icc.2013.6654812","title":"Improved detection and correlation of multi-stage VoIP attack patterns by using a Dynamic Honeynet System","display_name":"Improved detection and correlation of multi-stage VoIP attack patterns by using a Dynamic Honeynet System","publication_year":2013,"publication_date":"2013-06-01","ids":{"openalex":"https://openalex.org/W2122220160","doi":"https://doi.org/10.1109/icc.2013.6654812","mag":"2122220160"},"language":"en","primary_location":{"id":"doi:10.1109/icc.2013.6654812","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2013.6654812","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033866850","display_name":"Dirk Hoffstadt","orcid":null},"institutions":[{"id":"https://openalex.org/I62318514","display_name":"University of Duisburg-Essen","ror":"https://ror.org/04mz5ra38","country_code":"DE","type":"education","lineage":["https://openalex.org/I62318514"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Dirk Hoffstadt","raw_affiliation_strings":["Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany","[Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany","institution_ids":["https://openalex.org/I62318514"]},{"raw_affiliation_string":"[Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany]","institution_ids":["https://openalex.org/I62318514"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002951019","display_name":"Niels Wolff","orcid":null},"institutions":[{"id":"https://openalex.org/I62318514","display_name":"University of Duisburg-Essen","ror":"https://ror.org/04mz5ra38","country_code":"DE","type":"education","lineage":["https://openalex.org/I62318514"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Niels Wolff","raw_affiliation_strings":["Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany","[Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany","institution_ids":["https://openalex.org/I62318514"]},{"raw_affiliation_string":"[Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany]","institution_ids":["https://openalex.org/I62318514"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065243067","display_name":"Stefan Monhof","orcid":null},"institutions":[{"id":"https://openalex.org/I62318514","display_name":"University of Duisburg-Essen","ror":"https://ror.org/04mz5ra38","country_code":"DE","type":"education","lineage":["https://openalex.org/I62318514"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Stefan Monhof","raw_affiliation_strings":["Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany","[Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany","institution_ids":["https://openalex.org/I62318514"]},{"raw_affiliation_string":"[Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany]","institution_ids":["https://openalex.org/I62318514"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090597016","display_name":"Erwin P. Rathgeb","orcid":null},"institutions":[{"id":"https://openalex.org/I62318514","display_name":"University of Duisburg-Essen","ror":"https://ror.org/04mz5ra38","country_code":"DE","type":"education","lineage":["https://openalex.org/I62318514"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Erwin Rathgeb","raw_affiliation_strings":["Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany","[Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany","institution_ids":["https://openalex.org/I62318514"]},{"raw_affiliation_string":"[Computer Networking Technology Group, University of Duisburg-Essen, Essen, Germany]","institution_ids":["https://openalex.org/I62318514"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I62318514"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1968","last_page":"1973"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.9755980968475342},{"id":"https://openalex.org/keywords/voice-over-ip","display_name":"Voice over IP","score":0.694188117980957},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6833707690238953},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.5879132747650146},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5706082582473755},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.35767048597335815},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21906819939613342},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.0941622257232666}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.9755980968475342},{"id":"https://openalex.org/C171246234","wikidata":"https://www.wikidata.org/wiki/Q81945","display_name":"Voice over IP","level":3,"score":0.694188117980957},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6833707690238953},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.5879132747650146},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5706082582473755},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35767048597335815},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21906819939613342},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.0941622257232666}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc.2013.6654812","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2013.6654812","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6600000262260437,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W1527331048","https://openalex.org/W1981338755","https://openalex.org/W1986280577","https://openalex.org/W2151584216","https://openalex.org/W4242138061","https://openalex.org/W6631543519"],"related_works":["https://openalex.org/W2800182044","https://openalex.org/W2079500346","https://openalex.org/W178168142","https://openalex.org/W4232715385","https://openalex.org/W2254955413","https://openalex.org/W2182300180","https://openalex.org/W4316658914","https://openalex.org/W2956011222","https://openalex.org/W2352475565","https://openalex.org/W2742579858"],"abstract_inverted_index":{"Security":[0],"issues":[1],"like":[2],"service":[3],"misuse":[4,59],"and":[5,45,67,112,130,137,165],"fraud":[6],"are":[7,25],"well-known":[8],"problems":[9],"of":[10,71,92],"SIP-based":[11,58],"networks.":[12],"To":[13,81],"develop":[14],"effective":[15],"countermeasures,":[16],"it":[17],"is":[18,60],"important":[19],"to":[20,84,108,120,148,160],"know":[21],"how":[22],"these":[23],"attacks":[24,162],"launched":[26],"in":[27,118,163],"reality.":[28],"For":[29],"gathering":[30],"the":[31,68,72,76,93,99,109,123,128,167],"required":[32],"data,":[33],"a":[34,64,114,145],"specialized":[35],"SIP":[36,51],"Honeynet":[37,102],"System":[38,103],"has":[39,46],"been":[40],"running":[41],"since":[42],"January":[43],"2009":[44],"recorded":[47],"over":[48],"58":[49],"million":[50],"messages.":[52],"The":[53,152],"analyses":[54],"have":[55],"shown":[56],"that":[57],"typically":[61],"performed":[62],"as":[63,134],"multistage":[65],"attack":[66,87,140],"IP":[69,95],"address":[70,96],"attacker":[73],"changes":[74,91],"before":[75],"actual":[77],"Toll":[78],"Fraud":[79],"calls.":[80],"be":[82],"able":[83],"correlate":[85],"all":[86],"stages":[88],"despite":[89],"intermediate":[90],"attacker's":[94],"we":[97],"developed":[98,144],"new":[100,131],"Dynamic":[101],"(DHS),":[104],"which":[105],"reacts":[106],"according":[107],"attackers'":[110],"behaviour":[111],"uses":[113],"dynamic":[115,135,168],"Honeypot":[116],"configuration":[117],"real-time":[119,164],"significantly":[121],"improve":[122],"detection":[124],"efficiency.":[125],"We":[126,143],"present":[127],"architecture":[129],"features":[132],"such":[133],"reconfiguration":[136],"demonstrate":[138],"its":[139],"correlation":[141],"capabilities.":[142],"Sensor":[146,153],"component":[147],"realize":[149],"this":[150],"system.":[151],"provides":[154],"active":[155],"monitoring":[156],"based":[157],"on":[158],"signatures":[159],"detect":[161],"controls":[166],"Honeypot.":[169]},"counts_by_year":[{"year":2019,"cited_by_count":3},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}