Babel-SIP: Self-learning SIP message adaptation for increasing SIP-compatibility

Software implementing open standards like SIP evolves over time, and often during the first years of deployment, products are either immature or do not implement the whole standard but rather only a subset. As a result, standard compliant messages are sometimes wrongly rejected and communication fails. In this paper we describe a novel approach called Babel-SIP for increasing the rate of acceptance for SIP messages. Babel-SIP is a filter that can be put in front of the actual SIP parser of a SIP proxy. By training a C4.5 decision tree, it gradually learns, which SIP messages are accepted by the parser, and which are not. The same tree can then be used for classifying incoming SIP messages. Those classified as "not accepted" can then be pro- actively changed into the most similar message that is known to be accepted from the past. By running experiments using a commercial SIP proxy, we demonstrate that Babel-SIP can drastically increase the message acceptance rate.

[1]  Michaël Rusinowitch,et al.  Protocol analysis in intrusion detection using decision tree , 2004, International Conference on Information Technology: Coding and Computing, 2004. Proceedings. ITCC 2004..

[2]  Bikram Sengupta,et al.  Real-time monitoring of SIP infrastructure using message classification , 2007, MineNet '07.

[3]  Mark Handley,et al.  SIP: Session Initiation Protocol , 1999, RFC.

[4]  Thomas Röfer,et al.  Realtime Object Recognition Using Decision Tree Learning , 2004, RoboCup.

[5]  Zhi-Li Zhang,et al.  SIP-based VoIP traffic behavior profiling and its applications , 2007, MineNet '07.

[6]  Bernhard K. Aichernig,et al.  Protocol Conformance Testing a SIP Registrar: an Industrial Application of Formal Methods , 2007, Fifth IEEE International Conference on Software Engineering and Formal Methods (SEFM 2007).

[7]  Georg Carle,et al.  Principles, Systems and Applications of IP Telecommunications , 2010, IPTComm 2010.

[8]  Steve Moyle,et al.  Using model trees to characterize computer resource usage , 2004, WOSS '04.

[9]  Radu State,et al.  KiF: a stateful SIP fuzzer , 2007, IPTComm '07.