Patent ID: 8085763

Claim:
A method for protecting SIP (Session Initiation Protocol)-based applications wherein SIP messages are analyzed and malicious SIP messages that potentially constitute a security risk for the SIP-based application are identified, the method comprising: a plurality of processors programmed to perform: extracting a pre-definable number N of pre-configurable parameters identities from the SIP messages; comparing said identities with identities extracted from previous SIP messages for each SIP message; and assessing a maliciousness level ML on the basis of the comparison results for every SIP message, wherein an N-dimensional hyperspace is formed, which is created by the pre-defined identities, and wherein for each individual SIP message one point is entered in the hyperspace, each individual point in the hyperspace represents only one SIP message, the maliciousness level ML is computed as the sum of pre-configurable distances between each individual point in the N-dimensional hyperspace, and the pre-definable number N is greater than 1 .