h-Tech Techniques and Equipment for Preventing Electronic Eavesdropping, Recording Phone Calls, Ending Harassing Calls, and Stopping Toll Fraud. Col- orado, USA: Paladin Press. [12] Ruishan, Z., X. Wang, X. Yang, and X. Jiang. 2007. Billing attacks on SIP-based VoIP systems. In Proceedings of First USENIX Workshop on Offensive Technologies. [13] Wieser, C., M. Laakso, and H. Schulzrinne. 2003. Security testing of SIP implementations. Available online: http://compose.labri.fr/documenta tion/sip/Documentation/Papers/Security/Papers/462.pdf [14] Mitnick, D.K., W. L. Simon, and S. Wozniak. 2003. The Art of Decep- tion: Controlling the Human Element of Security. New York, USA: John Wiley & Sons. [15] Oxford Reference Online Premium, http://www.oxfordreference.com/. [16] Fu, X., B. Graham, R. Bettati, and W. Zhao. 2003. Active traffic anal- ysis attacks and countermeasures. Available on line: http://students.cs. amu.edu/xinwenfu/paper/ICCNMC03_Fu.pdf [17] Geneiatakis, D., G. Kambourakis, C. Lambrinoudakis, T. Dagiuklas, and S. Gritzalis. 2005. SIP message tampering: The SQL code INJECTION attack. 13th IEEE International Conference on Software, Telecommu- nications and Computer Networks (SoftCOM '05). N. Rozic et al. eds. 176-81. Split, Croatia. [18] Geneiatakis, D., G. Kambourakis, C. Lambrinoudakis, T. Dagiuklas, and S. Gritzalis. 2007. A framework for protecting SIP-based infrastruc- ture against Malformed Message Attacks. Computer Networks 51 (10): 2580-93. [19] Eddy, W. 2007. TCP SYN flooding attacks and common mitigations, Internet Engineering Task Force, RFC 4987, August. [20] Gibson, S. 2002. DRDoS distributed reflection denial of service. Avail- able on line: http://grc.com/dos/drdos.htm. [21] Stamp, M. 2005. Information Security: Principles and Practice. John Wiley & Sons, New York, USA: Wiley-Interscience. [22] Franks, J., P. Hallam-Baker, J. Hostetler, S. Lawrence, P. Leach, A. Luo- tonen, and L. Stewart. 1999. HTTP Authentication: Basic and digest access authentication. Internet Engineering Task Force, RFC 