Voice over Internet Protocol (VoIP) Security

Voice over Internet Protocol (VoIP) Security

Volumn , Issue , 2004, Pages 1-402

  Ransome, James F ^a   Rittinghouse, John W ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

EID: 33751045810     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1016/B978-1-55558-332-3.X5000-6     Document Type: Book

References (231)

1. http://www.itu.int/osg/spu/ni/iptel/
2. B. Emmerson (2004) Convergence: The Business Case for IP Telephony www.acaimc.com/downloads/businesscase.pdf Retrieved July 13, 2004 from
3. Gartner (2003) Business Planning for VoIP and IP-Telephony-train wreck or smooth ride? www.gartner.com/teleconferences/asset_9148.jsp Retrieved July 13, 2004 from
4. IQ Net (2001) A Handbook for Successful VoIP Deployment: Network Testing, QoS, and More http://itpapers.zdnet.com/abstract.aspx?docid=29619-tag=tu.tk.6587.f1 Retrieved July 13, 2004 from
5. T. Pisello (2003) Ask the Expert: Questions and Answers—ROI and IT Investment http://searchcio.techtarget.com/ateQuestionNResponse/0,289625,sid19_cid558148_tax292624,00.html Retrieved July 21, 2004 from
6. Business case for VoIP, remote agents, and converged communications. Retrieved July 13, 2004 from www.roinetworks.com/businessdiscussion.htm Roinetworks.com
7. Techabulary (2004) Voice over IP (VoIP) www.techabulary.com/v/voip.html Retrieved July 13, 2004 from
8. J. Walker and J. Hicks (2002) The Essential Guide to VoIP Implementation and Management www.2.cs.uh.edu/~sujeetv/projects/Ad/Hoc/NetIQ_VoIP_Chapter1.pdf Retrieved July 13, 2004 from
9. J. Walker and J. Hicks (2004) Taking Change of Your VoIP Project Indianapolis, IN: Cisco Press
10. C. McElroy Ciarán (August 2003) URL is Principles of Speech Coding Dublin, Ireland: Jaynta Ltd http://www.jaynta.com/technology/principles_of_speech_coding.pdf White paper by Dr
11. M.A. Gallo Michael A. and W.M. Hancock William M. (2002) Computer Communications and Networking Technologies Pacific Grove, CA: Brooks/Cole Publishing 88
12. U.D. Black Uyless D. (1998) Advanced Internet Technologies Upper Saddle River, NJ: Prentice-Hill 78-80
13. http://www.itu.int/aboutitu/overview/history.html
14. http://www.its.bldrdoc.gov/fs/1037/dir
15. TRIG Standard 106-99, “Telemetry Standards” White Sands Missile Range, NM 88002-5110: STEWSTD-RCC http://www.spiraltechinc.com/otis/IRIG_Files/IRIG_Chapter5.htm
16. http://www.obsolete.com/120_years/machines/vocoder
17. G. Campos and E. Gouvea (1996) Speech Synthesis Using the CELP Algorithm. Proceedings of ICSLP 96 (3)
18. M.R. Schroeder and B.S. Atal (Mar. 1985) Code-excited linear prediction (CELP): high-quality speech at very low bit rates. Proceedings of the IEEE International Conference on Acoustics, Speech, and Signal Processing (ICASSP) vol. 1 25.1.1-25.1.4
19. T.V. Ananthapadmanabha and G. Fant (1982) Calculation of true glottal flow and its components. Speech Communication 1(3–4), 167-184
20. H. Dudley (1936) Synthesizing speech. Bell Laboratories Record 15 98-102
21. H. Dudley (1950) The speaking machine of Wolfgang von Kempelen. Journal of the Acoustical Society of America 22(2), 151-166
22. H. Dudley, R.R. Riesz and S.S.A. Watkins (1939) A synthetic speaker. Journal of the Franklin Institute 2227(6), 739-764
23. A. Gersho and R.M. Gray (1992) Vector Quantization and Signal Compression Germany: Kluwer Academic Publishers
24. S. Lemmetty (1999) Review of Speech Synthesis Technology. Master's Thesis Finland: Helsinki University of Technology
25. J.A. Moorer (1978) The use of the phase vocoder in computer music applications. Journal of the Audio Engineering Society 26(1), 42-45
26. A.V. Oppenheim and R.W. Schafer (1989) Discrete-Time Signal Processing Englewood Cliffs, NJ: Prentice-Hall
27. A. Spanias (1994) Speech coding: A tutorial review. Proceedings of the IEEE 82 1539-1582
28. Communications Act of 1934: 50th Anniversary Supplement. Federal Communications Law Journal (Los Angeles)
29. These companies were Bell Atlantic, BellSouth, Southwestern Bell, NYNEX, Ameritech, US WEST, and Pacific Telesis
30. J. Alexander John, et al. (July 2001) Cisco CallManager Fundamentals: A Cisco AVVID Solution Cisco Press 720 pages
31. R.J. Bates Regis J. and D.W. Gregory Donald W. (August 2001) Voice and Data Communications Handbook McGraw-Hill 1032 pages
32. J.C. Bellamy John C. (March 2000) Digital Telephony Wiley 643 pages
33. R. Caputo Robert (September 1999) Cisco Packetized Voice & Data Integration McGraw-Hill 352 pages
34. D. Collins Daniel (September, 2000) Carrier Grade Voice Over IR McGraw-Hill 496 pages
35. J. Davidson, et al. (March 2000) Voice over IP Fundamentals Cisco Press 373 pages
36. B. Edgar Bob (April 2001) The Voice XML Handbook: Understanding and Building the Phone-Enabled Web CMP Books 481 pages
37. J. Farmer, D. Large and W. Ciciora (January 1999) Modern Cable Television Technology: Video, Voice, & Data Communications Morgan Kaufmann Publishers 873 pages
38. C. Gonzalo Camarillo and R. Jonathan Rosenberg (August 2001) SIP, Demystified McGraw-Hill 320 pages
39. A. Johnston Alan (January 2001) SIP: Understanding the Session Initiation Protocol Artech House 228 pages
40. S. Keagy Scott (October 2000) Integrating Voice and Data Networks Cisco Press 779 pages
41. Anonymous Routing. http://www.networkingnews.org/networking/routing.html
42. Y. Rekhter, et al. (1996) RFC 1918: Address Allocation for Private Internets. http://rfc.sunsite.dk Retrieved July 26, 2004 from
43. http://rfc.sunsite.dk
44. V. Fuller, et al. (1993) RFC 1519: Classless Inter-Domain Routing (CIDR): An Address Assignment and Aggregation Strategy. http://rfc.sunsite.dk Retrieved July 26, 2004 from
45. C. Hedrick, et al. (1988) RFC 1058: routing Information Protocol. http://rfc.sunsite.dk Retrieved July 26, 2004 from
46. Roamer and C. Hurley Chris (April 8, 2001) “Understanding IP Packets”, Parts 1–3. http://www.securitytribe.com URL is
47. RFC 791. Internet Protocol—DARPA Internet Program Protocol Specification
48. D. Kuhn, T. Walsh, Fries and Steffen (2004) Special Publication 800-58: Security Considerations for Voice Over IP Systems Recommendations of the National Institute of Standards and Technology National Institute of Standards and Technology, Technology Administration, U.S. Department of Commerce
49. H. Krawczyk, et al. (1997) RFC 2104: HMAC: Keyed-Hashing for Message Authentication. http://rfc.sunsite.dk Retrieved July 26, 2004 from
50. J. Rosenberg, et al. (2002) SIP: Session Initiation Protocol. http://rfc.sunsite.dk Retrieved July 26, 2004 from
51. M. Handley, et al. (1999) RFC 2543: SIP: Session Initiation Protocol. http://rfc.sunsite.dk Retrieved July 26, 2004 from
52. J. Franks, et al. (1999) RFC 2617: HTTP Authentication: Basic and Digest Access Authentication. http://rfc.sunsite.dk Retrieved July 26, 2004 from
53. H. Schulzrinne, et al. (1996) RFC 1889: RTP: A Transport Protocol for Real-Time Applications. http://rfc.sunsite.dk Retrieved July 26, 2004 from
54. M. Handley, et al. (1998) RFC 2327: SDP: Session Description Protocol. http://rfc.sunsite.dk Retrieved July 26, 2004 from
55. H. Schulzrinne, S. Casner, R. Frederick and V. Jacobson (2003) Network Working Group Request for Comments: 3550 (Obsoletes: 1889), Category: Standards Track, RTP: A Transport Protocol for Real-Time Applications. http://www.faqs.org/rfcs/rfc1889.html Retrieved July 2, 2004 from
56. J. Rosenberg and H. Schulzrinne (October/December 1998) The Session Initiation Protocol: Providing Advanced Telephony Services across the Internet. Bell Labs Technical Journal Vol. 3(No. 4), 144-160
57. M. Arango, et al. (1999) RFC2705: Media Gateway Control Protocol (MGCP) Version 1.0. http://rfc.sunsite.dk Retrieved July 26, 2004 from
58. Vanguard Managed Solutions (2003) Understanding Voice Technology—Vanguard Technical Reference. Mansfield, MA: Vanguard Managed Solutions
59. H. Schulzrinne, S. Casner, R. Frederick and V. Jacobson (2003) Network Working Group Request for Comments: 3550 (Obsoletes: 1889), Category: Standards Track, RTP: A Transport Protocol for Real-Time Applications. http://www.faqs.org/rfcs/rfc1889.html Retrieved July 2, 2004 from
60. R. Stewart, et al. (2000) Network Working Group Request for Comments: 2960, Category: Standards Track: Stream Control Transmission Protocol. http://www.ietf.org/rfc/rfc2960.txt Retrieved July 2, 2004 from
61. J. Loughney, M. Tuexen, J. Pastor-Balbas and S. Ericsson Espana (2004) Network Working Group Request for Comments: 3788, Category: Standards Track, Security Considerations for Signaling Transport (SIGTRAN) Protocols. http://www.ietf.org/rfc/rfc3788.txt Retrieved July 2, 2004 from
62. D. Kuhn, T. Walsh, Fries and Steffen (2004) Special Publication 800-58: Security Considerations for Voice Over IP Systems Recommendations of the National Institute of Standards and Technology. National Institute of Standards and Technology, Technology Administration, U.S. Department of Commerce
63. C. Groves, et al. (2003) Request for Comments—3525: Gateway Control Protocol Version 1. ftp://ftp.isi.edu/in.notes/rfc3525.txt Retrieved July 18, 2004 from
64. C. Groves, et al. (2003) Request for Comments—3525: Gateway Control Protocol Version 1. ftp://ftp.isi.edu/in.notes/rfc3525.txt Retrieved July 18, 2004 from
65. S Kent, et al. (1998) RFC 2402: IP Authentication Header. http://rfc.sunsite.dk Retrieved, July 26, 2004 from
66. D. Harkins and D. Carrel (1998) RFC 2409—The Internet Key Exchange (IKE). http://www.faqs.org/rfcs/rfc2409.html Retrieved July 18, 2004 from
67. DNSSEC (2004) DNSSEC—DNS Security Extensions Securing the Domain Name System. http://www.dnssec.net Retrieved July 2, 2004 from
68. P. Windley (2003) DNSSEC and Identity. http://www.windley.com/2003/08/19.html#a781 Retrieved July 2, 2004 from
69. J. Ash, et al. (2002) Network Working Group Request for Commoments: 3213, Applicability Statement for CR-LDP
70. Ash, et al. (2002) Network Working Group Request for Comments: 3213, Applicability Statement for CR-LDP
71. M. Arango, et al. (1999) RFC2705: Media Gateway Control Protocol (MGCP) Version 1.0 http://rfc.sunsite.dk/Retrieved July 26, 2004 from
72. K. Archer, et al. (2001) Voice and Data Security Indianapolis, IN: SAMS Publishing
73. S. Bellovin, J. Ioannidis, A. Keromytis and R. Stewart (2003) RFC 3554: On the Use of Stream Control Transmission Protcol (SCTP) with IPsec http://www.ietf.org/rfc/rfc3_554.txt Retrieved July 18, 2004 from
74. G. Biran (2004) Voice over Frame Relay, IP and ATM: The Case for Cooperative Networking http://www.protocols.com/papers/voe.htm Retrieved July 12, 2004 from
75. L. Coene (2002) RFC 3257: Stream Control Transmmission Protocol Applicability Statement http://www.faqs.org/rfcs/rfc3257.html Retrieved July 18, 2004 from
76. ENSC (2004) ENSC 835 Final Project Report http://www.ensc.sfu.ca/~ljilja/ENSC835/Projects/e.chan/Report.pdf Retrieved July 12, 2004 from
77. J. Franks, et al. (1999) RFC 2617: HTTP Autherntication: Basic and Digest Access Authentication http://rfc.sunsite.dk Retrieved, July 26, 2004 from
78. V. Fuller, et al. (1993) RFC 1549: Classless Inter-Domain Routing (CIDR): An Address Assignment and Aggregation Strategy http://rfc.sunsite.dk Retrieved July 26, 2004 from
79. C. Groves, et al. (2003) RFC 3525: Gateway Control Protocol Version 1 ftp://ftp/isi.edu/in_notes/rfc3525.txt Retrieved July 18, 2004 from
80. M. Handley, et al. (1998) RFC 2327: SDP: Session Description Protocol http://rfc.sunsite.dk Retrieved July 26, 2004 from
81. M. Handley, et al. (1999) RFC 2543: SIP: Session Initiation Protocol. http://rfc.sunsite.dk Retrieved July 26, 2004 from
82. D. Harkins and D. Carrel (1998) RFC 2409: The Internet Key Exchange (IKE) http://www.faqs.org/rfcs/rfc2409.html Retrieved July 18, 2004 from
83. C. Hedrick, et al. (1988) RFC 1058: Routing Information Protocol http://rfc.sunsite.dk Retrieved, July 26, 2004 from
84. A. Jungmaier, E. Rescoria and M. Tuexen (2002) RFC 3436: Transport Layer Security over Stream Control Transmission Protocol http://www.ietf.org/rfc/rfc3436.txt Retrieved July 18, 2004 from
85. S. Kent, et al. (1998) RFC 2402: IP Authentication Header http://rfc.sunsite.dk Retrieved, July 26, 2004 from
86. C. Kiser (2003) Regulatory Considerations for Cable-Provided IP Telephony http://www.mintz.com/images/dyn/publications/Kiser-IPTelephony.pdf Retrieved July 12, 2004 from
87. H. Krawczyk, et al. (1997) RFC-2104: HMAC: Keyed-Hashing for Message Authentication http://rfc.sunsite.dk Retrieved July 26, 2004 from
88. Management Information Base. http://www.ietf.org/internet-drafts/draft Retrieved July 12, 2004 from
89. R. McDermott (1999) Voice Over IP. Research Paper http://people.bu.edu/rjm,123/VoIP.htm Retrieved July 12, 2004 from
90. T. Nadeau, C. Srinivasen, A. Farrel, T. Hall and E. Harrison (2004) Internet Draft: Generalized Multiprotocol Label Switching (GMPLS) Label Switching Router (LSR) http://www.ietf.org/proceedings/02nov/I/D/draft Retrieved July 15, 2004 from
91. National Cable & Telecommunications Association (2004) Balancing Responsibilities and Rights: A Regulatory Model for Facilities-Based VoIP Competition—An NCTA Policy Paper http://www.ncta.com/PDF_files/VoIP_WhitePaper.pdf Retrieved July 12, 2004 from
92. Nex Tone Communications, Inc. (2003) Enterprise Voice Services http://www.nextone.com/pdfs/enterprise.pdf Retrieved July 12, 2004 from
93. L. Ong and J. Yoakum (2002) RFC 3286: An Introduction to the Stream Control Transmission Protocol (SCTP) http://www.faqs.org/rfcs/rfc3286.html Retrieved July 18, 2004 from
94. Y. Rekhter, et al. (1996) RFC 1918: Address Allocation for Private Internets http://rfc.sunsite.dk Retrieved July 26, 2004 from
95. J. Rosenberg, et al. (2002) RFC 3261: SIP: Session Initiation Protocol http://rfc.sunsite.dk Retrieved July 26, 2004 from
96. Samhassan.com (2004) Voice-Over-IP http://www.sam_hassan.com/Voice_Over Retrieved July 12, 2004 from
97. H. Schlzrinne, et al. (1996) RFC 1889: RTP: A Transport Protocol for Real-Time Applications http://rfc.sunsite.dk Retrieved July 26, 2004 from
98. R. Stewart, M. Ramalho, Q. Xie, M. Tuexen and P. Conrad (2004) RFC 3758: Stream Control Transmission Protocol (SCTP) Partial Reliability Extension http://rfc.sunsite.dk/rfc/rfc3758.html Retrieved July 18, 2004 from
99. J. Stone, R. Stewart and D. Otis (2002) RFC 3309: Stream Control Transmission Protocol (SCTP) Checksum Change http://www.ietf.org/rfc/rfc3309.txt Retrieved July 18, 2004 from
100. S. Villalona and C. Lee (2002) Voice Over IP http://webcompo_ser.pace.edu/CL78352N/IP_TelePP.ppt Retrieved July 12, 2004 from
101. J. Walker and J. Hicks (2004) Taking Charge of Your VoIP Project Indianapolis, IN: Cisco Press
102. K. Sollins (1992) Network Working Request Group For Comments: 1350 (Obsoletes: REC 783). The TFTP Protocol (Revision 2) http://www.faqs.org/rfcs/rfc1350.html Retrieved July 2, 2004 from
103. S. Villalona and Cho-Shun (2002) Voice Over IP. http://webcomposer.pace.edu/CL78352N/IPTelePP.ppt Retrieved July 28, 2004 from
104. R. Horak (2001) Dedicated vs. Switched Networks. http://www.commweb.com/shared/article/showArticle.jhtml?articleId=8704429andpgno=2 Retrieved July 28, 2004 from
105. Balancing Responsibilities and Rights: A Regulatory Model for Facilities-Based VolP Competition—An NCTA Policy Paper http://www.ncta.com/PDF_files/VoIPWhitePaper.pdf Retrieved February 2004 from
106. C. Kiser (2003) Regulatory Considerations for Cable-Provided IP Telephony. http://www.mintz.com/images/dyn/publications/Kiser-IPTelephony.pdf Retrieved March 2003 from
107. Senate Bill S.2281. http://www.thomas.loc.gov electronic document available from
108. K. Archer, et al. (2001) Voice and Data Security Indianapolis, IN: SAMS Publishing
109. G. Biran (2004) Voice over Frame Relay, IP and ATM: The Case for Cooperative Networking http://www.protocols.com/papers/voe.htm Retrieved July 12, 2004 from
110. ENSC (2004) ENSC 835 Final Project Report http://www.ensc.sfu.ca/~ljlja/ENSC835/Projects/e.chan/Report.pdf Retrieved July 12, 2004 from
111. C. Kiser (2003) Regulatory Considerations for Cable-Provided IP Telephony http://www.mintz.com/images/dyn/publications/Kiser-IPTelephony.pdf Retrieved July 12, 2004 from
112. R. McDermott (1999) Voice Over IP. Research Paper http://people.bu.edu/rjm123/VoIP.htm Retrieved July 12, 2004 from
113. National Cable & Telecommunications Association (2004) Balancing Responsibilities and Rights: A Regulatory Model for Facilities-Based VoIP Competition—An NCTA Policy Paper http://www.ncta.com/PDF_files/VoIPWhitePaper.pdf Retrieved July 12, 2004 from
114. NexTone Communications, Inc. (2003) Enterprise Voice Services http://www.nextone.com/pdfs/enterprise.pdf Retrieved July 12, 2004 from
115. Voice-Over-IP http://www.samhassan.com/Voice_Over Retrieved July 12, 2004 from
116. S. Villalona and C. Lee (2002) Voice Over IP http://webcomposer.pace.edu/CL78352N/IPTelePP.ppt Retrieved July 12, 2004 from
117. J. Walker and J. Hicks (2004) Taking Charge of Your VoIP Project Indianapolis, IN: Cisco Press
118. J. Walker and J. Hicks (2002) The Essential Guide to VoIP Implementation and Management: Ch. 6: Establishing VoIP SLAs. http://www.lstech.org/members/tad/netiq_guide_to_voip_implementation_and_management_ch._6%2C_voip_implementation_and_management.htm Retrieved July 18, 2004 from
119. K. Archer, et al. (2001) Voice and Data Security Indianapolis, IN: Sams Publishing
120. D. Gardner (2004) Study: Consumers Still Worried About VoIP Quality And Reliability http://www.techweb.com/wire/story/TWB20040614S0001 Retrieved July 15, 2004 from
121. C. Garifo (2001) No Downtime: SLA Assurance Growing in Importance for Providers, Customers http://www.xchangemag.com/articles/152back.html Retrieved July 18, 2004 from
122. K. Manzoor (2001) An Introduction to Voice-Over-IP (VoIP). http://www.homepages.com.pk/kashman/voip.htm Retrieved July 18, 2004 from
123. Network Associates (2003) Is VoIP Right for Your Medium-Sized Business? http://www.intelli_net.net/is%20voip%20right%20for%20your%20small%20business.pdf Retrieved July 18, 2004 from
124. B. Stanley (2002) Strengthen service-level agreements. http://www.nwfusion.com/careers/2002/0506man.html Retrieved July 18, 2004 from
125. J. Walker and J. Hicks (2002) The Essential Guide to VoIP Implementation and Management: Chapter Six: Establishing VoIP SLAs http://www.lstech.org/members/tad/netiq_guide_to_voip_implementation_and_management_ch._6%2C_voip_implementation_and_management Retrieved July 18, 2004 from
126. J. Walker and J. Hicks (2004) Taking Charge of Your VoIP Project: Strategies and Solutions for Successful VoIP Deployments Indianapolis, IN: Cisco Press
127. L. Gordon, M. Loeb, W. Lucyshyn and R. Richardson (2004) 2004 CSI/FBI Computer Crime and Security Survey. http://i.cmpnet.com/gocsi/db_area/pdfs/fbi/FBI2004.pdf Retrieved July 26, 2004 from
128. Office of the National Counterintelligence Executive (2003) Annual Report to Congress on Foreign Economic Collection and Industrial Espionage—2003 http://www.fas.org/irp/ops/ci/docs/2003.pdf Retrieved July 26, 2004 from
129. P. Allen (2002) VoIP Facing Fraud Threat. http://www.pcw.co.uk/news/1133971 Retrieved on July 26, 2004 from
130. California Department of Corrections (2003) Telephone Scams!. http://www.cdc.state.ca.us/InfoSecurity/Articles/A_TELEPHONE_SCAM.asp Retrieved on July 26, 2004, from
131. ZVON (2004) RFC 3261: Security Considerations: Threat Model and Security Usage Recommendations. http://www.zvon.org/tmRFC/RFC3261/Output/chapter26.html Retrieved August 3, 2004 from
132. VOMIT: Voice Over Misconfigured Internet Telephones http://vomit.xtdnet.nl
133. E. Skoudis (2004) The Evolution of Malware. ISSA Denver Chapter Presentation, June 8, 2004, Denver, CO
134. International Telecommunication Union (2003) Security and Encryption for H-series (H.323 and other H.245-based) multimedia terminals—ITU-T. Recommendation H.235. http://www.javvin.com/protocol/H235v3.pdf Retrieved August 8, 2004 from
135. D. Song (2004) Dsniff. http://monkey.org/~dugsong/dsniff Retrieved August 8, 2004 from
136. HNS (2002) Multiple Vulnerabilities in CISCO VoIP Phones. http://www.net_security.org/vuln.php?id=1703 Retrieved August 7, 2004 on
137. A. Abramson (2004) VoIP Hackers Mean Business. http://andyabramson.blogs.com/VoIPwatch/2004/07/VoIP_hackers_me.html Retrieved August 7, 2004 from
138. K. Poulsen (2004) VoIP Hackers Gut Caller ID. http://www.theregister.co.uk/2004/07/07/hackers_gut_VoIP/Retrieved. August 7, 2004 from
139. Internet Security Systems (2003) Vonage VoIP Could Allow an Attacker to Spoof the Caller ID. http://xforce.iss.net/xforce/xfdb/12939 Retrieved August 7, 2004 from
140. Security Advisory: Asterisk CallerID CDR SQL Injection http://www.atstake.com/research/advisories/2003/a091103_1.txt
141. wIfI, 802.11 http://encyclopedia.thefreedictionary.com/WiFi,%20802.11
142. Cisco (2002) Configuring H.323 Gatekeepers and Proxies http://noc.caravan.ru/ciscocd/cc/td/doc/product/software/iourl http://noc.caravan.ru/ciscocd/cc/td/doc/product/software/ios122/122cgcr/fvvfax_c/vvf323gk.htm22/122cgcr/fvvfax_c/vvf323gk.htm Retrieved August 5, 2004 from
143. Free Ware Palm (2004) PocketDial 1.0 http://www.freewarepalm.com/communication/pocketdial.shmtl Retrieved September 22, 2004 from
144. R. Hayden (2004) http://www.rhyshaden.com/voice.htm Retrieved August 5, 2004 from
145. SIP, Session Initiation Protocol http://www.networksorcery.com/enp/protocol/sip.htm Retrieved August 4, 2004 from
146. J. Rosenberg (2002) SIP: Session Initiation Protocol http://www.jdrosen.net/papers/draft_ietf Retrieved August 3, 2004 from
147. Security Focus (2004) THC-SCAN 2.0 http://www.securityfocus.com/tools/47 Retrieved September 22, 2004 from
148. T. Shultz (2000) Voice over IP. http://www.eicon.com/disv4bri/whtpap4.htm Retrieved August 5, 2004 from
149. ZVON (2004) RFC 3261: Security Considerations: Threat Model and Security Usage Recommendations http://www.zvon.org/tmRFC/RFC3261/Output/chapter26.html Retrieved August 3, 2004 from
150. SANS Institute (2004) SANS Institute Web page. http://www.sans.org Retrieved August 9, 2004 from
151. CERT Coordination Center (2004) Carnegie Mellon Software Engineering Institute. CERT Coordination Center Web page. http://www.cert.org Retrieved August 9, 2004 from
152. http://www.isaca.org/gir/catDspl.cfm?catID=11andcatName=Telecommunications#subcat97
153. http://www.all.net/books/audit/pbx/general.html
154. http://www.auditnet.org/docs/pbxaudit.txt
155. Y. Rekhter, et al. (1996) RFC 1918—Address Allocation for Private Internets. http://www.faqs.org/rfcs/rfc1918.html Retrieved August 12, 2004 from
156. Netrake (2004) Netrake Web site. http://www.netrake.com Retrieved August 12, 2004 from
157. J. Halpern (2002) IP Telephony Security in Depth. White Paper, Cisco Systems. http://www.cisco.com/warp/public/cc/so/cuso/epso/sqfr/safip_wp.pd Retrieved August 13, 2004 from
158. Y. Wu, et al. (2004) SCIDIVE: A Stateful and Cross Protocol Intrusion Detection Architecture for Voice-over-IP Environments. http://dynamo.ecn.purdue.edu/~sbagchi/Research/Papers/scidive_dsn04_submit.pdf Retrieved August 14, 2004 from
159. National Security Agency (2004) NSA/SNAC Router Security Configuration Guide, Version 1.1. http://nsa1.www.conxion.com/cisco/guides/cis/1.pdf Retrieved August 13, 2004, from
160. NIST (2004) Security Considerations for Voice Over IP Systems—Special Publication 800-58 (DRAFT). http://csrc.nist.gov/publications/drafts/NIST_SP800_58 Retrieved August 16, 2004 from
161. J. Rosenberg (2002) RFC 3261-SIP: Session Initiation Protocol. http://www.faqs.org/rfcs/rfc3261.html Retrieved August 17, 2004 from
162. Anonymous (Feb. 2001) Voice Over IP Via Virtual Private Networks: An Overview. White Paper, AVAYA Communication
163. Ibid
164. Ibid
165. Ibid
166. Javvin Company (2004) Protocol Dictionary—H.235: Security and encryption for H.323 (and other H.245-based) multimedia terminals. http://www.javvin.com/protocolH235.html Retrieved August 17, 2004 from
167. M. Arango, A. Dugan, C. Huitema and S. Pickett (1999) RFC 2705—Media Gateway Control Protocol (MGCP) Version 1.0. http://www.faqs.org/rfcs/rfc2705.html Retrieved August 16, 2004 from
168. H. Schulzrinne, S. Casner, R. Frederick and V. Jacobson (1996) RFC 1889—RTP: A Transport Protocol for Real-Time Applications. http://www.faqs.org/rfcs/rfc1889.html Retrieved August 17, 2004 from
169. M. Handley and V. Jacobson (1998) RFC 2327—SDP: Session Description Protocol. http://www.ietf.org/rfc/rfc2327.txt Retrieved August 17, 2004 from
170. C. Groves, M. Pantaleo, T. Anderson and T. Taylor (2003) RFC 3525: Gateway Control Protocol—Version 1. http://ietfreport.isoc.org/rfc/rfc3525.txt Retrieved August 16, 2004 from
171. Ibid
172. S. Kent and R. Atkinson (1998) RFC 2402—IP Authentication Header. http://www.faqs.org/rfcs/rfc2402.html Retrieved August 17, 2004 from
173. Packetizer (2004) H.248. http://www.packetizer.com/iptel/h248/Retrieved August 17, 2004 from
174. P. Golen (2002) Virtual Private Networking. http://www.windowsecurity.com/articles/Virtual_Private_Networking.html Retrieved August 18, 2004 from
175. Web Host Industry Review, Inc. (2002) What is VPN Encryption? http://findvpn.com/articles/encryption.php Retrieved August 18, 2004 from
176. B. Gleeson, J. Heinanen, G. Armitage and A. Malis (2000) RFC 2764—A Framework for IP-Based Virtual Private Networks. http://www.faqs.org/rfcs/rfc2764.html Retrieved August 25, 2004 from
177. Telcordia Technologies (2004) Performance and Security Analysis of SIP Using IPsec. National Institute of Standards and Technology
178. R. Ratchkov Overview of VPN. http://www.ratchkov.com/vpn Retrieved on August 18, 2004 from
179. S. Kent and R. Atkinson (1998) RFC 2401—Security Architecture for the Internet Protocol. http://www.faqs.org/rfcs/rfc2401.html Retrieved August 18, 2004, from
180. S. Kent and R. Atkinson (1998) RFC 2402—IP Authentication Header. http://www.faqs.org/rfcs/rfc2402.html Retrieved August 18, 2004, from
181. D. Harkins and D. Carrel (1998) RFC 2409—The Internet Key Exchange (IKE). http://www.faqs.org/rfcs/rfc2409.html Retrieved August 19, 2004, from
182. R. Sinden (2002) Comparison of Voice over IP with Circuit Switching Techniques. UK: Department of Electronics and Computer Science, Southampton University
183. National Institute of Standards and Technology (2004) NIST Special Publication 800-58: Security Considerations for Voice Over IP Systems Recommendations of the National Institute of Standards and Technology. http://csrc.nist.gov/publications/drafts/NIST_SP800_58 Retrieved August 3, 2004 from
184. B. Munch (2003) VoIP Security: Part 3—Product Status. http://techupdate.zdnet.com/techupdate/stories/main/0,14179,2914628,00.html Retrieved August 14, 2004 from
185. All.net. (2004) A PBX Audit Checklist http://www.all.net/books/audit/pbx/general.html Retrieved August 9, 2004 from
186. K. Archer, et al. (2001) Voice and Data Security Indianapolis, IN: SAMS Publishing
187. J. Cavanagh (2002) Secure Business Telephony With VoIP: A Technical White Paper http://www.consultant/registry.com/delivery/TSWP1.pdf Retrieved August 3, 2004 from
188. Cisco (2002) Configuring H. 323 Gatekeepers and Proxies http://noc.caravan.ru/ciscocd/cc/td/doc/product/software/ios/122/122cgcr/fvvfax_c/vvf323gk.htm Retrieved August 5, 2004 from
189. CERT Coordination Center (2004) Carnegie Mellon Software Engineering Institute CERT Coordination Center http://www.cert.org Web page. Retrieved August 9, 2004 from
190. B. Cloud (2000) PBX Audit Review and Questionnaire: Key Areas to Review During a PBX Audit http://www.auditnet.org/docs/pbxaudit.txt Retrieved August 9, 2004 from
191. B. Gleeson, J. Heinanen, G. Armitage and A. Malis (2000) RFC 2764-A Framework for IP Based Virtual Private Networks http://www.faqs.org/rfcs/rfc2764.html Retrieved August 25, 2004 from
192. J. Halpern (2002) IP Telephony Security in Depth http://www.cisco.com/warp/public/cc/so/cuso/epso/sqfr/safip_wp.pdf White Paper, Cisco Systems. Retrieved August 13, 2004 from
193. ISACA.org. (2004) Telecommunications http://www.isaca.org/gir/catDspl.cfm?catID=11&catName=Telecommunications#subcat97 Retrieved August 9, 2004 from
194. T. Le (2004) Internet Firewalls: The Thin Red Line http://www.sal.cs.uiuc.edu/~steng/cs497_01/presentation.pdf Retrieved August 9, 2004 from
195. B. Munch (2003) VoIP Security: Part 3—Product Status http://techupdate.zdnet.com/techupdate/stories/main Retrieved August 14, 2004 from
196. National Security Agency (2004) NSA/SNAC Router Security Configuration Guide, Version 1.1 http://nsal.www.conxion.com/cisco/guides/cis/1.pdf Retrieved August 13, 2004 from
197. Netrake (1988) Netrake Web site. http://www.netrake.com Retrieved August 12, 2004 from
198. National Institute of Standards and Technology (2004) NIST Special Publication 800-58: Security Considerations for Voice Over IP Systems Recommendations of the National Institute of Standards and Technology http://csrc.nist.gov/publications/drafts/NIST_SP800/58 Retrieved August 3, 2004 from
199. Y. Rekhter, et al. (1996) RFC 1918—Address Allocation for Private Internets http://www.faqs.org/rfcs/rfc1918.html Retrieved August 12, 2004 from
200. SANS Institute (2004) SANS Institute Web page. http://www.sans.org Retrieved August 9, 2004 from
201. SecureLogix Corporation (2004) TeleWall: Telecommunications Firewall 4.1 http://www.securelogix.com/applications/telewall.htm Retrieved August 3, 2004 from
202. J. Thalhammer (2002) Security in VoIP—Telephony Systems. Master's Thesis http://www.iaik.tu.graz.ac.at/../teaching/11_diplomarbeiten/archive/thalhammer.pdf Retrieved August 3, 2004 from
203. Vitel Software, Inc. (2003) Voice Network Security: Strategies for Control http://www.ivize.com/pub/security_wp401.pdf Retrieved August 9, 2004 from
204. J. Walker and J. Hicks (2004) Taking Charge of Your VoIP Project Indianapolis, IN: Cisco Press
205. Y. Wu, et al. (2004) SCIDIVE: A Stateful and Cross Protocol Intrusion Detection Architecture for Voice-over-IP Environments http://dynamo.ecn.purdue.edu/~sbagchi/Research/Papers/scidive_dsn04_submit.pdf Retrieved August 14, 2004 from
206. ZVON (2004) RFC 3261: Security Considerations: Threat Model and Scurity Usage Recommendations http://www.zvon.org/tmRFC/RFC3261/Output/chapter26.html Retrieved August 3, 2004 from
207. J. Bartash (2004, April 30) Qwest CEO Breaks Ranks with Bells: Says phone industry must change how it does business. http://cbs.marketwatch.com/news/story Retrieved August 26, 2004 from
208. IDG News Service (2004, April 22) FCC rejects AT&T VoIP petition. http://www.itworld.com/Man/2697/040422fccatt/Retrieved August 27, 2004 from
209. AT&T (2004, August 23) AT&T CallVantage Service to be Available in More Than 600 Best Buy Stores Nationwide http://www.att.com/news/item/0%2C1847%2C13214%2C00.html Retrieved August 27, 2004 from
210. IPTAlog.org (2004, July 23) Regulating VoIP http://www.iptablog.org/legislation Retrieved August 27, 2004 from
211. D. McCullagh (2004) Feds seek wiretap access via VoIP. http://zdnet.com.com/2100_1105_2 Retrieved August 26, 2004 from
212. C. Carlson (2004) Will States or Feds Control VoIP Regulations? http://www.eweek.com/print_article/0,1761_a=132098,00.asp Retrieved August 26, 2004 from
213. R. Towne (2004) VoIP. http://www.rogertowne.com/VoIP.htm#Technology Retrieved August 26, 2004 from
214. CERT Coordination Center (1994) CERTA Coordination Center web document. http://www.cert.org Also see CERT Annual Report to ARPA for further information
215. United States Dept. of JusticeThe National Information Infrastructure Protection Act of 1996 Legislative AnalysisWeb document at http://www.usdoj.gov/criminal/cybercrime/1030_anal.html
216. United States of America Executive Order http://www.whitehouse.gov issued October 16, 2001, by President George W. Bush
217. Public Law 107-56 electronic document available from the Library of Congress, ref H.R. 3162 http://www.thomas.loc.gov
218. More information on these-changes can be found at the U.S. Department of Justice Web site. http://www.usdoj.gov
219. Known as the “Cable Act,” 47 U.S.C. § 551
220. Known as the “Wiretap Statute,” 18 U.S.C. § 2510 et seq.; ECPA, 18 U.S.C. § 2701 et seq
221. Known as the “Pen/Trap Statute,” 18 U.S.C. § 3121 et seq
222. RFC 1087, “Ethics and the Internet” Internet Activities Board http://www.ietf.org
223. IPDeliver (2004) VoIP Knowledgebase http://www.ipdeliver.com/voip_k_future.php Retrieved August 27, 2004 from
224. eMarketeer (2004, June) Flurry of Activity in VoIP Market over Coming Years http://www.emarketeer.com/Article.aspx?1002871 Retrieved on August 26, 2004 from
225. FreeWorldDialup (2004) Welcome to FWD! http://www.pulver.com/fwd/Retrieved on August 27, 2004 from
226. Net2Phone (2004) Net2Phone homepage. http://web.net2phone.com/cable/Retrieved on August 27, 2004 from
227. Packet8 (2004) Packet8 Homepage. http://www.packet8.net/about/index.asp Retrieved on August 27, 2004 from
228. VoicePulse (2004) About VoicePulse Inc. http://www.voicepulse.com/corporate/default.aspx Retrieved on August 27, 2004 from
229. Vonage (2004) About Vonage http://www.vonage.com/corporate/aboutus_index.php Retrieved on August 27, 2004 from
230. Source and S. Haley (2004, August 23) Security Outsourcing to Soar http://news.earthweb.com/ent/news/article.php/3398471 Retrieved August 27, 2004 from
231. J. Mears (2004, August 23) Is security ripe for outsourcing? http://www.nwfusion.com/news/2004/082304outsecure.html?fsrc=rss/security Retreved on August 27, 2004 from