Challenges in Securing Voice over IP

IEEE Security and Privacy

Volumn 3, Issue 3, 2005, Pages 44-49

  Walsh, Thomas J ^a   Kuhn, D Richard ^a  

^a NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNATIONAL TELECOMMUNICATION UNION(ITU); NETWORK ADDRESS TRANSLATION (NAT); SESSION INITIATION PROTOCOL (SIP); VOICE OVER PROTOCOLS (VOIP);

COMPUTER NETWORKS; CRYPTOGRAPHY; PROBLEM SOLVING; QUALITY OF SERVICE; SECURITY OF DATA; TELECOMMUNICATION SYSTEMS;

NETWORK PROTOCOLS;

EID: 20844455974     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2005.62     Document Type: Review

References (18)

1. Recommendation ITU-T H.323, Packet-Based Multimedia Communications Systems, Int'l Telecomm. Union, 1998.
2. J. Rosenberg et al., Session Initiation Protocol, IETF RFC 3261; www.ietf.org/rfc/rfc3261.txt.
3. Vulnerability Note VU#749342, "Multiple Vulnerabilities in H.323 Implementations" US Computer Emergency Readiness Team, www.kb.cert.org/ vuls/id/749342.
4. Recommendation ITU-T G.114, One Way Transmission Time, Int'l Telecomm. Union, 1988.
5. A. Kos, B. Klepec, and S. Tomazic, "Techniques for Performance Improvement of VoIP Applications," IEEE Mediterranean Electrotechnical Conf., IEEE Press, 2002, pp. 250-254.
6. V. Fineberg, "Building a QoS-Enabled IP Network: A Practical Architecture for Implementing End-to-End QoS in an IP Network," IEEE Comm., Jan. 2002, pp. 122-130.
7. D.R. Kuhn, T.J. Walsh, and S. Fries, Security Considerations for Voice Over IP Systems, SP 800-58, US Nat'l Inst. Standards and Technology, Dec. 2003.
8. Bugtraq, "Multiple Vulnerabilities in Cisco VoIP Phones," May 2002, http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00219.html.
9. N. Wosnack, "Bugtraq: A Vonage VoIP 3-Way Call CID Spoofing Vulnerability," Aug. 2003, http://seclists.org/lists/bugtraq/2003/Aug/0274. html.
10. PROTOS: Security Testing of Protocol Implementations, tech. report, Univ. of Oulu, Jan. 2005; www.ee.oulu.fi/research/ouspg/protos/index.html.
11. C. Wieser, M. Laakso, and H. Schulzrinne, Security Testing of SIP Implementations, tech. report CUCS-24-03, Dept. of Computer Science, Columbia Univ., 2003.
12. CERT Advisory CA-2003-06, "Multiple Vulnerabilities in Implementations of the Session Initiation Protocol (SIP)," www.cert.org/advisories/CA-2003-06.html.
13. O. Arkin, "More Vulnerabilities with Pintgel xpressa SIP-based IP Phones," Sys-Security Group, 2002, www.sys -security, com/archive/ advisories/More_Vulnerabilities_with_Pingtel_xpressa_Phones.pdf.
14. "MIDCOM: Middlebox Comm. Working Group," www.ietf.org/html. charters/midcom-charter.html.
15. J.-I. Guo, J.-C. Yen, and H.-F. Pai, "New Voice over Internet Protocol Technique with Hierarchical Data Security Protection," IEE Proc. Vision, Image, & Signal Processing, vol. 149, no. 4, Aug. 2002, pp. 237-243.
16. Nat'l Inst. of Standards and Technology, Advanced Encryption Standard, Federal Information Processing Standard 197, Nov. 2001, http://csrc.nist.gov/ publications/fips/fips-197/fips-197.pdf.
17. R. Barbieri, D. Bruschi, and E. Rosti, "Voice over IPsec: Analysis and Solutions," Proc. 18th Ann. Computer Security Applications Conf., IEEE CS Press, 2002, pp. 261-270.
18. Cisco, "Reference Guide to Implementing Crypto and QoS," document ID 18667, Oct. 2002, www.cisco.com/warp/public/105/crypto_qos.html.