Securing the Next Steps In Signalling (NSIS) protocol suite. (2nd August 2006)

• Record Type: Journal Article
• Authors: Tschofenig, Hannes; Fu, Xiaoming
• Is Part Of: International journal of internet protocol technology. Volume 1:Number 4(2006)
• Page Start: 271
• Page End: 282
• Publication Date: 2006-08-02
• Subjects: QoS signalling -- signalling protocols -- Resource Reservation Protocol -- RSVP -- Next Steps In Signalling -- NSIS -- General Internet Signalling Transport -- GIST -- security -- AAA services; File Transfer Protocol (Computer network protocol) -- Periodicals; Multicasting (Computer networks) -- Periodicals; 004.678
• Languages: English
• ISSNs: 1743-8209

Abstract

The Next Steps In Signalling (NSIS) protocol suite represents an extensible framework for enabling various signalling applications over IP-based networks. The framework consists of two layers that need different types of security protection; the lower layer mainly deals with the discovery of adjacent peers and establishment of channel security to protect the delivery of signalling messages between two peers, while the upper layer provides the signalling application specific functionalities. Different security properties are required at the two layers with stronger authorisation functionality at the signalling application layer. In this paper we examine how various security vulnerabilities can be utilised by an adversary, including eavesdropping, Man-In-The-Middle (MITM) attacks, fraud and Denial of Service (DoS) attacks. Moreover, we describe how to protect against a number of selected security threats and highlight some security challenges that require further research.