2617, June. [23] Thayer, R., N. Doraswamy, and R. Glenn. 1998. IP Security Document Roadmap. Internet Engineering Task Force, RFC 2411, November. [24] Bellovin, S. M. 1996. Problem Areas for the IP Security Protocols. In Proceedings of the Sixth USENIX UNIX Security Symposium, San Jose. Available on line: ftp://ftp.research.att.com/dist/smb/badesp.ps., July. C 2009 by Taylor & Francis Group, LLC SIP Security: Threats, Vulnerabilities and Countermeasures [25] Dierks T., and E. Rescoral. 2006. The Transport Layer Security (TLS) Protocol Version 1.1. RFC 4346, April. [26] Ono, K., and S. Tachimoto. 2005. Requirements for End-To-Middle Secu- rity for the Session Initiation Protocol (SIP). RFC 4189. October. [27] Cao, F., and C. Jennings. 2006. Providing response identity and authen- tication in IP telephony. In Proceedings of the First International Con- ference on Availability, Reliability and Security 20-22 April, 8. [28] Geneiatakis, D., and C. Lambrinoudakis. 2007. A lightweight protection mechanism against signaling attacks in a SIP-based VoIP environment. Telecommunication Systems, 36(4): 153-59. [29] Yang, C., R. Wang, and W. Liu. 2005. Secure authentication scheme for session initiation Protocol. Computers & Security 24 (5): 381-86. [30] Wu, Y., S. Bagchi, S. Garg, and N. Singh. 2004. SCIDIVE: A state- ful and cross protocol intrusion detection architecture for voice-over-IP environments. In Proceedings of International Conference on Dependable Systems and Networks, 433-42. [31] Ding, Y., and G. Su. 2007. Intrusion detection system for signal based SIP attacks through timed HCPN. The Second International Conference on Availability, Reliability and Security (ARES). 190-97, 10-13. [32] Zhang, G., S. Ehlert, T. Magedanz, and D. Sisalem. 2007. Denial of service attack and prevention on SIP VoIP infrastructures using DNS flooding. Principles, Systems and Applications of IP Telecommunica- tions (IPTComm2007). New York, USA. [33] Reynolds, B., and D. Ghosal. 2003. Secure IP telephony using multi- layered protection.