PT  - JOURNAL ARTICLE
AU  - Safarik, Jakub
AU  - Voznak, Miroslav
AU  - Rezac, Filip
AU  - Macura, Lukas
TI  - IP Telephony Server Emulation for Monitoring and Analysis of Malicious Activity in VOIP Network
DP  - 2013 Jul 31
TA  - Communications - Scientific Letters of the University of Zilina
PG  - 191--196
VI  - 15
IP  - 11
AID - 10.26552/com.C.2013.2A.191-196
IS  - 13354205
AB  - The paper aims at gathering information about attacks from real internet infrastructure and their analysis. For this purpose, we prepared a set of honeypots monitoring various aspects of VoIP infrastructure including SIP endpoint and SSH terminal emulation. SIP endpoints are registered with real SIP registrar and the incoming calls are routed to a honeypot according the rules in dialplan. The honeypot gathers valuable data about hacker's activity with no threat to production systems. Analysis of the honeypot data is crucial for further improvement of existing security mechanisms in VoIP networks. The paper describes the honeypot's behaviour and brings an analysis of a detected malicious activity as well.