SIP Trace Recorder: Monitor and analysis tool for threats in SIP-based networks

Security issues like service misuse and fraud are well-known problems of SIP-based networks. To develop effective countermeasures, it is important to know how these attacks are launched in reality. For gathering the required data, we have developed a monitoring and analyzing system which we call “SIP Trace Recorder (STR)”. It can be used in different scenarios and parses and stores relevant SIP information in a database. Based on the collected SIP data, the STR analysis plug-ins provide different, automatic threat analyses. It also offers a Privacy Option which can be activated in sensitive environments (e.g., productive telephone systems) to protect private data, but preserve all of its analysis functions. In this paper, we present the architecture, features and usage scenarios of the STR and demonstrate its automatic threat analysis capabilities.