Research on the Voice over IP Security

Aimin Pan

2004-01-01

Abstract:The paper introduces the advantages of the VoIP, points out its shortage on security. Two major VoIP standards, H.323 and SIP, are analyzed about the security. The research directions are given about VoIP's security problem at the end of the paper.

What problem does this paper attempt to address?

SIP Authentication Mechanism and Its Performace Analysis

金康双,王泽兵,冯雁,陈海燕

DOI: https://doi.org/10.3969/j.issn.1001-3695.2004.08.034

2004-01-01

Abstract:Session Initiation Protocol(SIP) is the Internet Engineering Task Force (IETF) standard for IP telephony,and it has a promising applied prospect.In this work,the security authentication mechanism used by SIP is described.Moreover an experimental performance analysis of the SIP security mechanisms is provided,which based on the open source Java implementation of a SIP proxy server.
VoIP Technology: Security Issues Analysis

Amor Lazzez

DOI: https://doi.org/10.48550/arXiv.1312.2225

2013-12-08

Networking and Internet Architecture

Abstract:Voice over IP (VoIP) is the technology allowing voice and multimedia transmissions as data packets over a private or a public IP network. Thanks to the benefits that it may provide, the VoIP technology is increasingly attracting attention and interest in the industry. Actually, VoIP allows significant benefits for customers and communication services providers such as cost savings, rich media service, phone and service portability, mobility, and the integration with other applications. Nevertheless, the deployment of the VoIP technology encounters many challenges such as architecture complexity, interoperability issues, QoS issues, and security concerns. Among these disadvantages, VoIP security issues are becoming more serious because traditional security devices, protocols, and architectures cannot adequately protect VoIP systems from recent intelligent attacks. The aim of this paper is carry out a deep analysis of the security concerns of the VoIP technology. Firstly, we present a brief overview about the VoIP technology. Then, we discuss security attacks and vulnerabilities related to VoIP protocols and devices. After that, we talk about the security profiles of the VoIP protocols, and we present the main security components designed to help the deployment of a reliable and secured VoIP systems.
Cryptanalysis of a Data Security Protection Scheme for VoIP

CQ Li,S Li,D Zhang,G Chen

DOI: https://doi.org/10.1049/ip-vis:20045234

2006-01-01

IEE Proceedings - Vision Image and Signal Processing

Abstract:A voice-over-Internet protocol technique with a new hierarchical data security protection (HDSP) scheme using a secret chaotic bit sequence has been recently proposed. Some insecure properties of the HDSP scheme are pointed out and then used to develop known/chosen-plaintext attacks. The main findings are: given n known plaintexts, about (100 - (50/2(n)))% of secret chaotic bits can be uniquely determined; given only one specially-chosen plaintext, all secret chaotic bits can be uniquely derived; and the secret key can be derived with practically small computational complexity when only one plaintext is known (or chosen). These facts reveal that HDSP is very weak against known/chosen-plaintext attacks. Experiments are given to show the feasibility of the proposed attacks. It is also found that the security of HDSP against the brute-force attack is not practically strong. Some countermeasures are discussed for enhancing the security of HDSP and several basic principles are suggested for the design of a secure encryption scheme.
A Solution to the Callcenter Using VoIP Based on H.323 Protocols

KANG Li-min,ZHANG Dan

DOI: https://doi.org/10.3969/j.issn.1007-130x.2006.03.005

2006-01-01

Abstract:In this paper,we introduce the H.323 and SIP protocols related to VoIP, and expatiate a VoIP remote telephony solution to the callcenter based on H.323 protocols.
SECURITY ISSUES IN VOIP BASED ON SIP

Chen Changpeng,Jin Lei,Chen Kai,Bai Yingcai

DOI: https://doi.org/10.3969/j.issn.1000-386X.2007.08.064

2007-01-01

Abstract:Session Initiaton Protocol(SIP) is currently replacing H.323 step by step to be the promising signaling protocol for the IP telephony services.The SIP security issues are illustrated by several examples.And the security mechanism problem and the End-to-middle security problem are put forward.
Research on Security of SIP Conferencing

FENG Li,WANG Jun,SHA Li,LI Jun-chao,HOU Hui-chao

2011-01-01

Abstract:Existing research on the SIP conferencing always only focuses on system architecture,utility function and running performance,but overlooks security issue in conferences.The security problems mainly summarize to two kinds,which are confidentiality problems caused by leakage and reliability problems caused by SIP attacks.According to these problems in SIP conferencing,this paper proposes a series of methods to advance SIP standard conferencing framework.The conference confidentiality technology research includes password security and media security.We use moderator's authentication and encryption to achieve double insurance.The conference reliability research mainly includes standardized examination,protocol extensions and SIP flooding intrusion detection.We verify the reasonableness via the experiment at last.
Security Issues in VoIP Based on H.323

Huang Yong-feng,Deng Ze,Li Xing

DOI: https://doi.org/10.1007/bf02830435

2004-01-01

Abstract:We first discusses some threats to VoIP system and H. 323 architectures designed for VoIP communications on security point of view. Continues with presenting security requirements of VoIP, and explaining the essential security constraints surrounding a seccessful VoIP deployment. Finally, suggests some strategies to implement the security and encryption functions of VoIP system based on H. 323.
Research on SIP Security Mechanism

Qing Lü

2007-01-01

Abstract:Session Initiation Protocol (SIP) is an important protocol adopted by the 3rd Generation Partnership Project (3GPP) for the IP Multimedia Subsystem (IMS). Facing the complex and open Internet environment, the security of SIP is poor. After the analysis of the security threats to SIP aiming at cleartext transmission of SIP message and lack of authentication methods, the scheme of data encryption and authentication are researched. And then, we discuss how using the existent techniques for improving the security of SIP and propose the ideas of the security solution to SIP.
Design and Implementation of Distributed VoIP Architecture Based on SIP Protocol

张旭光,平玲娣,潘雪增

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.14.037

2004-01-01

Abstract:With the development of the Internet technologies and computer communication technologies, the traditionary circuit-switch based network must evolves to the new generation network which is based on the packet-switch technology. Facing the progress and status of the convergence of the three-networks, This document presents a distributed and SIP protocal based VoIP system prototype. Due to combinating of merits of SIP and IP, this model not only provides the interoperation with the existed network, but also provides an extendable plat for the NGN. This model uses private VoIP network to achieve the QoS.
Analysis of GSM and GPRS Security

WANG Qi-hua,CHEN Qi

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.02.049

2005-01-01

Abstract:The GSM and GPRS system provides solutions to a few important aspects of security: subscriber authentication, subscriber identity confidentiality and confidentiality of voice and data over the radio path. An analysis of the security features provided in a GSM and GPRS network is given.
Research, design and implement of media stream security solution in VoIP

Bin Hou,Yu Q. Lu,De X. Ye,Gang Liu

2006-01-01

Abstract:This paper introduced the confidentiality and integrality of multimedia data in the SIP-based VoIP system, explained the essentiality and actuality of the problem, and analysed the key technology. Based on the theory of separating application and carrying layer, the encryption was designed on application layer, transparent to the transport layer and end-to-end, media stream security solution in VoIP.
Briefly on the Evolution of VoIP——On the Application of H.323 and SIP Protocols

Xuerong Chen

2005-01-01

Abstract:With the rapid development of IP technology, VoIP technology based on IP is rapidly popular in the fields of computer and telecommunications. To develop and perfect this technology to fully replace PSTN has become a hot research. This paper introduces VoIP technology briefly and expounds the application and developing direction of two kinds of protocol standards of VoIP.
Audit Analysis Models, Security Frameworks and Their Relevance for VoIP

Oscar Gavilanez,Franklin Gavilanez,Glen Rodriguez

DOI: https://doi.org/10.48550/arXiv.1704.02440

2017-04-08

Cryptography and Security

Abstract:Voice over IP (VoIP) is the transmission of voice and multimedia content over Internet Protocol (IP) networks, this paper reviews models, frameworks and auditing standards proposed to this date to manage VoIP security through a literature review, with descriptions of both the historical and philosophical evolution reflecting an adequate knowledge of related research. Three research questions are raised here: RQ1. What are the requirements to be met by a model of security audit in VoIP systems to achieve their goals? RQ2. Today, are there additional attacks that previous works have not considered? RQ3. Which security requirements in the VoIP systems are covered (and which are not covered) by security frameworks? After some discussion about VoIP Protocols, Attacks on VoIP, Information Technology (IT) audit, IT security audits, Frameworks and auditing standards, we present a unified view of VoIP Security Requirements; as well as considering the contributions and disadvantages of frameworks and auditing standards toward achieving those requirements through a comparative evaluation. It was determined that there is no security framework which considers social engineering attacks in spite of being an important aspect to consider in security management VoIP; also there is no specific framework that covers all categories of security requirements for VoIP system, therefore, a more extensive model is needed.
Security Analysis of Session Initiation Protocol Digest Access Authentication Scheme.

Yuting Feng,Feng Xiong,Wenchao Huang,Yan Xiong

DOI: https://doi.org/10.1109/bigcom53800.2021.00005

2021-01-01

Abstract:The Internet Engineering Task Force (IETF) proposed the Session Initiation Protocol (SIP) as the IP-based telephony protocol. With the widespread application of the Voice over IP (VoIP) on Internet, Security problems of SIP have received a lot of attention of researchers and the authentication mechanism in SIP is becoming increasingly important. Many studies reveal that the initial version of SIP specification suffers malicious attacks. To improve the security of the authentication mechanism in SIP, amendments and supplements are expressed over years. Researches on the previous specification have been carried out and some attacks are found, such as replay attack, online dictionary attack, man in the middle attack, etc. However, there is currently a lack of security analysis to the fresh security mechanisms of SIP. In this paper, we accommodate such a requirement by analyzing the security properties of SIP Digest Access Authentication Scheme adopting a formal protocol analysis tool SPAN. The authentication scheme is modeled in the validator according to two practical scenarios. With the two back-ends of SPAN, the two models of authentication scheme are verified both as safe. This result confirms that the supplemented version of SIP authentication mechanism is more reliable.
Research on DOS Attack and Defense of SIP

XU Zhen-Duan,MA Jin,LU Song-nian

DOI: https://doi.org/10.3969/j.issn.1009-8054.2009.04.039

2009-01-01

Abstract:DoS/DDoS have become the biggest threat to the Internet,because the attacker could easily launch attack and hide themselves.With the fast development of the Internet,the core protocol of NGN-Session Initial Protocol(SIP)has become more and more popular,and security problem of SIP attracted more and more attention.This paper focuses on the research and analysis of DOS attack against SIP,and gives security solutions for mitigating the DOS attack.
NEW Research about VPN Communication Based on Protocol of IPSec over Http

MEI Song,LI Zhi-tang

DOI: https://doi.org/10.3969/j.issn.1000-1220.2007.06.012

2007-01-01

Abstract:This paper first discusses the classic methods of covering communication to traverse the firewall devices which control the networking communication. And based on the analysis of IPSec protocol architecture, that the limitation of network compatibility of IPSec is got. So the new protocol of IPSec over Http based on IPSec tunnel and Http tunnel is exposed with its structure and procedure. The structure of FreeSWAN is improved and the performance test data are presented in order to validate this new protocol. Finally, the performance of the new system is analysed detailedly.
Deployment of VoIP Technology: QoS Concerns

Amor Lazzez,Thabet Slimani

DOI: https://doi.org/10.48550/arXiv.1312.2581

2013-12-08

Networking and Internet Architecture

Abstract:Voice over IP (VoIP) is an emerging communication service allowing voice transmission over a private or a public IP network. VoIP allows significant benefits for customers and service providers including cost savings, phone and service portability, mobility, and the integration with other applications. Nevertheless, the deployment of the VoIP technology encounters many challenges such as interoperability issues, security issues, and QoS concerns. Among these disadvantages, QoS issues are considered the most serious due to the QoS problems that may arise on IP networks, and the stringent QoS requirements of voice traffic. The aim of this paper is carry out a deep analysis of the QoS concerns of the VoIP technology. Firstly, we present a brief overview about the VoIP technology. Then, we discuss the QoS issues related to the use of the IP networking technology for voice traffic transmission. After that, we present the QoS concerns related voice clarity. Finally, we present the QoS mechanisms proposed to make the IP technology able to support voice traffic QoS requirements in terms of voice clarity, voice packet delay, packet delay variation, and packet loss.
Research on the security of session initation protocol(SIP)networks

Zhang Zhaoxin,Fang Binxing,Hu Mingzeng,Zhang Hongli

DOI: https://doi.org/10.3772/j.issn.1002-0470.2008.03.003

2008-01-01

Abstract:In consideration of the security threats in session initiation protocol (SIP) based networks,this paper put forward the deterministic finite automation (DFA) model for SIP attack methods.The attack theories and methods of five attacks of registration hijacking,INVITE,re-INVITE,tearing down sessions,and DoS were deeply analys based on the model,and all the attacks were recurred in real circumstances.At the same time the method to forbid the third part registration or registration rank carving in dealing with registration hijacking attacks,and the improved HTTP digest authentication pro- tocol and the hop-by-hop encryption within proxy to deal with the attacks of INVITE,re-INVITE and BYE were put for- ward and implemented,which improved the security and usability of SIP networks.
Application & Research of IPSec in IPV6

lei LI,Wei-min WANG

DOI: https://doi.org/10.3969/j.issn.1673-2928.2006.04.016

2006-01-01

Abstract:IPV6 have more advantages than IPV4 in security . Its advantage is integrating IPSec in IPV6.Introduces IPV6s protocol security and Security strategy, describes the relation of IPSec and other web services .
Research on a Security Architecture for the Internet Protocol

符松,金志权,陈佩佩

DOI: https://doi.org/10.3969/j.issn.1000-3428.2001.10.045

2001-01-01

Abstract:IPSec is a security architecture for the Internet protocol ,which provides transparent protection services for upper protocols. It consists of the protocols of automatic key management, authentication and encryption. In this paper, some modifications and a new protocol for the runtime detection are presented to enhance the efficiency and security of the original architecture.

Research on the Voice over IP Security

SIP Authentication Mechanism and Its Performace Analysis

VoIP Technology: Security Issues Analysis

Cryptanalysis of a Data Security Protection Scheme for VoIP

A Solution to the Callcenter Using VoIP Based on H.323 Protocols

SECURITY ISSUES IN VOIP BASED ON SIP

Research on Security of SIP Conferencing

Security Issues in VoIP Based on H.323

Research on SIP Security Mechanism

Design and Implementation of Distributed VoIP Architecture Based on SIP Protocol

Analysis of GSM and GPRS Security

Research, design and implement of media stream security solution in VoIP

Briefly on the Evolution of VoIP——On the Application of H.323 and SIP Protocols

Audit Analysis Models, Security Frameworks and Their Relevance for VoIP

Security Analysis of Session Initiation Protocol Digest Access Authentication Scheme.

Research on DOS Attack and Defense of SIP

NEW Research about VPN Communication Based on Protocol of IPSec over Http

Deployment of VoIP Technology: QoS Concerns

Research on the security of session initation protocol(SIP)networks

Application & Research of IPSec in IPV6

Research on a Security Architecture for the Internet Protocol