SECURITY ISSUES IN VOIP BASED ON SIP

Chen Changpeng,Jin Lei,Chen Kai,Bai Yingcai

DOI: https://doi.org/10.3969/j.issn.1000-386X.2007.08.064

2007-01-01

Abstract:Session Initiaton Protocol(SIP) is currently replacing H.323 step by step to be the promising signaling protocol for the IP telephony services.The SIP security issues are illustrated by several examples.And the security mechanism problem and the End-to-middle security problem are put forward.

What problem does this paper attempt to address?

SIP Authentication Mechanism and Its Performace Analysis

金康双,王泽兵,冯雁,陈海燕

DOI: https://doi.org/10.3969/j.issn.1001-3695.2004.08.034

2004-01-01

Abstract:Session Initiation Protocol(SIP) is the Internet Engineering Task Force (IETF) standard for IP telephony,and it has a promising applied prospect.In this work,the security authentication mechanism used by SIP is described.Moreover an experimental performance analysis of the SIP security mechanisms is provided,which based on the open source Java implementation of a SIP proxy server.
Security Issues in VoIP Based on H.323

Huang Yong-feng,Deng Ze,Li Xing

DOI: https://doi.org/10.1007/bf02830435

2004-01-01

Abstract:We first discusses some threats to VoIP system and H. 323 architectures designed for VoIP communications on security point of view. Continues with presenting security requirements of VoIP, and explaining the essential security constraints surrounding a seccessful VoIP deployment. Finally, suggests some strategies to implement the security and encryption functions of VoIP system based on H. 323.
A Solution to the Callcenter Using VoIP Based on H.323 Protocols

KANG Li-min,ZHANG Dan

DOI: https://doi.org/10.3969/j.issn.1007-130x.2006.03.005

2006-01-01

Abstract:In this paper,we introduce the H.323 and SIP protocols related to VoIP, and expatiate a VoIP remote telephony solution to the callcenter based on H.323 protocols.
Cryptanalysis of a Data Security Protection Scheme for VoIP

CQ Li,S Li,D Zhang,G Chen

DOI: https://doi.org/10.1049/ip-vis:20045234

2006-01-01

IEE Proceedings - Vision Image and Signal Processing

Abstract:A voice-over-Internet protocol technique with a new hierarchical data security protection (HDSP) scheme using a secret chaotic bit sequence has been recently proposed. Some insecure properties of the HDSP scheme are pointed out and then used to develop known/chosen-plaintext attacks. The main findings are: given n known plaintexts, about (100 - (50/2(n)))% of secret chaotic bits can be uniquely determined; given only one specially-chosen plaintext, all secret chaotic bits can be uniquely derived; and the secret key can be derived with practically small computational complexity when only one plaintext is known (or chosen). These facts reveal that HDSP is very weak against known/chosen-plaintext attacks. Experiments are given to show the feasibility of the proposed attacks. It is also found that the security of HDSP against the brute-force attack is not practically strong. Some countermeasures are discussed for enhancing the security of HDSP and several basic principles are suggested for the design of a secure encryption scheme.
Research on Security of SIP Conferencing

FENG Li,WANG Jun,SHA Li,LI Jun-chao,HOU Hui-chao

2011-01-01

Abstract:Existing research on the SIP conferencing always only focuses on system architecture,utility function and running performance,but overlooks security issue in conferences.The security problems mainly summarize to two kinds,which are confidentiality problems caused by leakage and reliability problems caused by SIP attacks.According to these problems in SIP conferencing,this paper proposes a series of methods to advance SIP standard conferencing framework.The conference confidentiality technology research includes password security and media security.We use moderator's authentication and encryption to achieve double insurance.The conference reliability research mainly includes standardized examination,protocol extensions and SIP flooding intrusion detection.We verify the reasonableness via the experiment at last.
Research on SIP Security Mechanism

Qing Lü

2007-01-01

Abstract:Session Initiation Protocol (SIP) is an important protocol adopted by the 3rd Generation Partnership Project (3GPP) for the IP Multimedia Subsystem (IMS). Facing the complex and open Internet environment, the security of SIP is poor. After the analysis of the security threats to SIP aiming at cleartext transmission of SIP message and lack of authentication methods, the scheme of data encryption and authentication are researched. And then, we discuss how using the existent techniques for improving the security of SIP and propose the ideas of the security solution to SIP.
Design and Implementation of Distributed VoIP Architecture Based on SIP Protocol

张旭光,平玲娣,潘雪增

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.14.037

2004-01-01

Abstract:With the development of the Internet technologies and computer communication technologies, the traditionary circuit-switch based network must evolves to the new generation network which is based on the packet-switch technology. Facing the progress and status of the convergence of the three-networks, This document presents a distributed and SIP protocal based VoIP system prototype. Due to combinating of merits of SIP and IP, this model not only provides the interoperation with the existed network, but also provides an extendable plat for the NGN. This model uses private VoIP network to achieve the QoS.
Research on the security of session initation protocol(SIP)networks

Zhang Zhaoxin,Fang Binxing,Hu Mingzeng,Zhang Hongli

DOI: https://doi.org/10.3772/j.issn.1002-0470.2008.03.003

2008-01-01

Abstract:In consideration of the security threats in session initiation protocol (SIP) based networks,this paper put forward the deterministic finite automation (DFA) model for SIP attack methods.The attack theories and methods of five attacks of registration hijacking,INVITE,re-INVITE,tearing down sessions,and DoS were deeply analys based on the model,and all the attacks were recurred in real circumstances.At the same time the method to forbid the third part registration or registration rank carving in dealing with registration hijacking attacks,and the improved HTTP digest authentication pro- tocol and the hop-by-hop encryption within proxy to deal with the attacks of INVITE,re-INVITE and BYE were put for- ward and implemented,which improved the security and usability of SIP networks.
Research on the Voice over IP Security

Aimin Pan

2004-01-01

Abstract:The paper introduces the advantages of the VoIP, points out its shortage on security. Two major VoIP standards, H.323 and SIP, are analyzed about the security. The research directions are given about VoIP's security problem at the end of the paper.
Research, design and implement of media stream security solution in VoIP

Bin Hou,Yu Q. Lu,De X. Ye,Gang Liu

2006-01-01

Abstract:This paper introduced the confidentiality and integrality of multimedia data in the SIP-based VoIP system, explained the essentiality and actuality of the problem, and analysed the key technology. Based on the theory of separating application and carrying layer, the encryption was designed on application layer, transparent to the transport layer and end-to-end, media stream security solution in VoIP.
Security Analysis of Session Initiation Protocol Digest Access Authentication Scheme.

Yuting Feng,Feng Xiong,Wenchao Huang,Yan Xiong

DOI: https://doi.org/10.1109/bigcom53800.2021.00005

2021-01-01

Abstract:The Internet Engineering Task Force (IETF) proposed the Session Initiation Protocol (SIP) as the IP-based telephony protocol. With the widespread application of the Voice over IP (VoIP) on Internet, Security problems of SIP have received a lot of attention of researchers and the authentication mechanism in SIP is becoming increasingly important. Many studies reveal that the initial version of SIP specification suffers malicious attacks. To improve the security of the authentication mechanism in SIP, amendments and supplements are expressed over years. Researches on the previous specification have been carried out and some attacks are found, such as replay attack, online dictionary attack, man in the middle attack, etc. However, there is currently a lack of security analysis to the fresh security mechanisms of SIP. In this paper, we accommodate such a requirement by analyzing the security properties of SIP Digest Access Authentication Scheme adopting a formal protocol analysis tool SPAN. The authentication scheme is modeled in the validator according to two practical scenarios. With the two back-ends of SPAN, the two models of authentication scheme are verified both as safe. This result confirms that the supplemented version of SIP authentication mechanism is more reliable.
Analysis of GSM and GPRS Security

WANG Qi-hua,CHEN Qi

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.02.049

2005-01-01

Abstract:The GSM and GPRS system provides solutions to a few important aspects of security: subscriber authentication, subscriber identity confidentiality and confidentiality of voice and data over the radio path. An analysis of the security features provided in a GSM and GPRS network is given.
Standard Interchange Protocol 2: Theory, Design and Implementation

Wei Dong

DOI: https://doi.org/10.4028/www.scientific.net/amm.513-517.2480

2014-01-01

Applied Mechanics and Materials

Abstract:In this paper, we conduct research on Standard Interchange Protocol 2 (SIP2). Then, based on the research, a SIP2 class is designed using object-oriented model. The SIP2 class includes several methods, which comprise check in, check out, patron status, and so forth. To demonstrate its functionality, we use the SIP2 class in a new library circulation system. Compared to traditional protocols for transaction in library system, test results show that our implementation of SIP2 class works well and has a better performance.
SIP Security Scheme of Internet Multimedia Communication

Jin-long Hu,Ling Zhang,Yong Xu,Zhao Ye

DOI: https://doi.org/10.3969/j.issn.1000-565X.2012.04.001

2012-01-01

Abstract:As the traditional software-based SIP security schemes are vulnerable to embezzlement, deception and invasion, a dual authentication framework combined with the trusted computing technology is proposed for endpoint system and user identity. Then, a new SIP security scheme for Internet multimedia communication is presented, which takes advantage of the trusted platform module and the direct anonymous attestation algorithm to design a new registration sub-protocol for improving the security of multimedia communication systems. Moreover, the security of the registration sub-protocol is verified by using the provable security model, and the characteristics of the whole scheme are finally analyzed.
VoIP Technology: Security Issues Analysis

Amor Lazzez

DOI: https://doi.org/10.48550/arXiv.1312.2225

2013-12-08

Networking and Internet Architecture

Abstract:Voice over IP (VoIP) is the technology allowing voice and multimedia transmissions as data packets over a private or a public IP network. Thanks to the benefits that it may provide, the VoIP technology is increasingly attracting attention and interest in the industry. Actually, VoIP allows significant benefits for customers and communication services providers such as cost savings, rich media service, phone and service portability, mobility, and the integration with other applications. Nevertheless, the deployment of the VoIP technology encounters many challenges such as architecture complexity, interoperability issues, QoS issues, and security concerns. Among these disadvantages, VoIP security issues are becoming more serious because traditional security devices, protocols, and architectures cannot adequately protect VoIP systems from recent intelligent attacks. The aim of this paper is carry out a deep analysis of the security concerns of the VoIP technology. Firstly, we present a brief overview about the VoIP technology. Then, we discuss security attacks and vulnerabilities related to VoIP protocols and devices. After that, we talk about the security profiles of the VoIP protocols, and we present the main security components designed to help the deployment of a reliable and secured VoIP systems.
Security mechanisms for SIP-based multimedia communication infrastructure

Si Duanfeng,Long Qin,Han Xinhui,Zou Wei

DOI: https://doi.org/10.1109/ICCCAS.2004.1346199

2004-01-01

Abstract:We have proposed a generic SIP-based application topology model called secure multimedia communication infrastructure (SMCI) and constructed a real multimedia communication application based on it. We now emphasize the security issues in the SMCI and give the entire secure framework in detail. We also analyze the processing load of our security mechanism in order to explain the practicability of our secure framework. Hop by hop and end to end security are introduced to defend the attacks of registration hijacking, impersonating a server, tampering with message bodies, tearing down sessions, denial of service and amplification. We also considered the privacy problem that will be the most important consideration in the future. Finally, a security analysis is presented to demonstrate that the proposed security mechanisms are robust and efficient to secure the SMCI.
Session Initiation Protocol and Application:Status, Problem and Prospect

SI Duanfeng,Han Xinhui,LONG Qin,PAN Aimin

DOI: https://doi.org/10.3969/j.issn.1000-3428.2005.10.001

2005-01-01

Abstract:Session initiation protocol is one of the core protocols of NGN. SIP is a promising protocol and will be applied in many fields, including the third generation communication, network control, multimedia distribution, voice over IP, multimedia conference, instant message, networked appliance, etc.This paper presents the history and architecture of SIP ,also evaluates the SIP application in every pop fields, points out the problem and gives a direction of SIP application development.
An Improved Authenticated Key Agreement with Anonymity for Session Initiation Protocol

Haoran Chen,Jianhua Chen,Han Shen

DOI: https://doi.org/10.1504/ijesdf.2017.10004413

2017-01-01

International Journal of Electronic Security and Digital Forensics

Abstract:As a lightweight and flexible signalling protocol, session initiation protocol (SIP) has been widely used for establishing, modifying and terminating the sessions in the multimedia environment. The increasing concerns about the security of communication sessions that run over the public Internet has made authentication protocols for SIP more desired. Recently, Lu et al. proposed an authentication scheme for SIP and claimed that their scheme is secure against various known attacks while maintaining efficiency. However, in this paper we will indicate that their protocol suffers from server spoofing attacks and failed to provide mutual authentication as they claimed. Further, we have presented an improved authentication protocol for SIP and proved its security using BAN logic. Though the security and performance analysis, we illustrate that the proposed scheme is more secure and flexible.
A Proxy-Based Server Irrelevant Security Mechanism for VoIP

Yun Zhao,Jianxin Wang,Xingjun Wang

DOI: https://doi.org/10.1109/ISCID.2013.35

2013-01-01

Abstract:With the development of Internet, people can use their computer to make calls instead of telephone. Many Internet calls take place without any protection. TLS and SRTP could keep the callee and caller from third party's malicious action. However, both methods could do little when the reliability of VoIP server is under suspicion. In this paper, we present a server irrelevant security mechanism for VoIP system based on SIP and RTP. This mechanism implements safety handshake in media channel. User gets certificate from third party CA. Caller and callee exchange PKI or IBE information during the call. As long as the server keeps media data unchanged, this mechanism could ensure the safety of the call against server eavesdropping. It is flexible because the user could utilize different CA to obtain suitable safety demand with the same VoIP server. Cooperating with other protective methods, it can provide a more reliable environment for Internet telephone.
Security Mechanism for SIP-based Video Conference

邓秀锋,赵明生

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.10.040

2004-01-01

Abstract:The paper analyses the security threats and requirements of video conference. It also designs and implements a security mechanism of video conference by extending the session initiation protocol. Participants use their certificates to authenticate themselves to MCU, and negotiate keys with MCU. The keys are used for the encryption/decryption and authentication of media streams transferred by multicast in the conference. Some signaling messages are also encrypted and signed by this mechanism. This security mechanism supplies authentication for participants, integrity and confidentiality of communication data.

SECURITY ISSUES IN VOIP BASED ON SIP

SIP Authentication Mechanism and Its Performace Analysis

Security Issues in VoIP Based on H.323

A Solution to the Callcenter Using VoIP Based on H.323 Protocols

Cryptanalysis of a Data Security Protection Scheme for VoIP

Research on Security of SIP Conferencing

Research on SIP Security Mechanism

Design and Implementation of Distributed VoIP Architecture Based on SIP Protocol

Research on the security of session initation protocol(SIP)networks

Research on the Voice over IP Security

Research, design and implement of media stream security solution in VoIP

Security Analysis of Session Initiation Protocol Digest Access Authentication Scheme.

Analysis of GSM and GPRS Security

Standard Interchange Protocol 2: Theory, Design and Implementation

SIP Security Scheme of Internet Multimedia Communication

VoIP Technology: Security Issues Analysis

Security mechanisms for SIP-based multimedia communication infrastructure

Session Initiation Protocol and Application:Status, Problem and Prospect

An Improved Authenticated Key Agreement with Anonymity for Session Initiation Protocol

A Proxy-Based Server Irrelevant Security Mechanism for VoIP

Security Mechanism for SIP-based Video Conference