Browse > Article

Anti-Spam for VoIP based on Turing Test  

Kim, Myung-Won (숭실대학교 정보통신전자공학부)
Kwak, Hu-Keun (숭실대학교 정보통신전자공학부)
Chung, Kyu-Sik (숭실대학교 정보통신전자공학부)
Publication Information
Journal of KIISE:Computing Practices and Letters / v.14, no.3, 2008 , pp. 261-265 More about this Journal
Abstract
As increasing the user of VoIP service using ITSP(Internet Telephony Service Provider), the VoIP spam becomes a big problem. The spam used in the existing public telephone is detected by using the pattern inspection of call behavior because it is difficult to filter contents for the characteristic of real-time voice communication. However there is a false-positive problem. The threat on spam remains where spam with low threshold can't be detected or users share one number. In this paper, we propose anti-spam for VoIP based on luring test. The proposed method gives a user luring test and he/she can connect to a receiver if passing turing test. A ticket is given to a user that pass luring test and it reduces overhead of luring test in re-dial. The proposed method is implemented on ASUS WL-500G wireless router and Asterisk IP-PBX. Experimental results show the effectiveness of the proposed method.
Keywords
VoIP Spam; Turing Test; Wireless Router;
Citations & Related Records
연도 인용수 순위
  • Reference
1 이재일, "VoIP 보안위협과 대응방안", 한국정보보호진흥원, 2007
2 정수환, "VoIP Spam and Security," Korea Internet Conference (KRnet), 2006
3 J. Rosenberg et al, "The Session Initiation Protocol (SIP) and Spam," Internet-Draft, 2004
4 추현우, "OECD Anti-Spam Toolkit 권장정책 및 대응방안", 한국정보보호진흥원, 2007
5 조영철, "VoIP 보안의 향후 전망", Network Times, 2005
6 Sipera System, "Sipera Enterprise VoIP Security Solution," White Paper, 2006
7 VQIPSA, "VoIP Security and Privacy Threat Taxonomy," White Paper, 2005
8 S. Park, J. Kim, and S. Kang, "Analysis of applicability of traditional spam regulations to VoIP spam," The 8th International Conference Advanced Communication Technology, pp. 1215-1217, 2006
9 H. Tschofenig et al, "Anti-SPIT : A Document Format for Expressing Anti-SPIT Authorization Policies," Internet-Draft, 2007