Patent ID: 8806630
Filing Date: 2014-08-12
Classification: G06F,H04L

Abstract:
1. A method to protect a service platform, the method comprising: detecting, with a processor, responses from the service platform indicative of questionable signaling protocol transactions; storing transaction records corresponding to the questionable signaling protocol transactions, at least one of the transaction records identifying a signaling protocol message and an associated first originating device address corresponding to a respective questionable transaction; monitoring a user identifier for a first threshold number of Session Initiation Protocol requests when the user identifier is associated with only the first originating device address; monitoring the user identifier for a second threshold number of Session Initiation Protocol requests when the user identifier is associated with the first originating device address at a first time and a second originating device address at a second time; and generating a response indicating that the first originating device address is associated with an improper intrusion of the service platform.