VoIP security assessment: Methods and tools

1st IEEE Workshop on VoIP Management and Security, VoIP MaSe 2006

Volumn , Issue , 2006, Pages 27-32

  Abdelnur, H ^a   Cridlig, V ^a   State, R ^a   Festor, O ^a  

^a LORIA   (France)

Author keywords

Protocol fuzzer; Security; VoIP management

Indexed keywords

COMPUTER CRIME; COST EFFECTIVENESS; NETWORK PROTOCOLS; SECURITY SYSTEMS; VOICE/DATA COMMUNICATION SYSTEMS;

MALICIOUS USAGE; PROTOCOL FUZZER; SECURITY ASSESSMENT TASKS; VOIP MANAGEMENT;

SECURITY OF DATA;

EID: 33751059308     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. J. R. J. F. Ransome, Voice over Internet Protocol (VoIP) Security. Digital Press, November 2004.
2. O. Arkin, "Security risk factors with ip telephony based networks," Tech. Rep., 2002. [Online]. Available: "http://www.sys- security.com/index.php?page=voip"
3. _, "The cisco ip phones compromise," Tech. Rep., September 2002. [Online]. Available: "http://www.sys-security.com/index.php?page= voip"
4. G. K. S. McClure, J. Scambray, Hacking Exposed. McGraw-Hill Osborne Media; 5 edition, April 2005).
5. C. McNab, Network Security Assessment. O'Reilly; 1 edition, March 2004).
6. H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Sparks, M. Handley, and E. Schooler, "SIP: Session Initiation Protocol," June 2002. [Online]. Available: http://www.ietf.org/rfc/rfc3261.txt
7. H. Schulzrinne, S. Casner, R. Frederick, and V. Jacobson, "RTP: A Transport Protocol for Real-Time Applications," July 2003. [Online]. Available: http://www.rfc-editor.org/rfc/rfc3550.txt
8. S. Faust, "Web application testing with spi fuzzer," Tech. Rep., 2004. [Online]. Available: "http://www.spidynamics.com/support/ whitepapers/SPIFuzzer.pdf"
9. D. Aitel, "An Introduction to SPIKE, the Fuzzer Creation Kit," 2001-2002. [Online]. Available: http://www.blackhat.com/presentations/bh-usa-02/ bh-us-02-aitel-spike.ppt
10. H. Schulzrinne, "RTP Profile for Audio and Video Conferences with Minimal Control," August 1996. [Online]. Available: http://www.ietf.org/ rfc/rfc1890.txt
11. R. Enns, "NETCONF Configuration Protocol," Internet Draft, work in progress, December 2005.
12. "The Voice over IP Security Alliance (VOIPSA)." [Online]. Available: http://www.voipsa.org/
13. O. University, "PROTOS Test-Suite," 2002. [Online]. Available: http://www.ee.oulu.fi/research/ouspg/protos/testing/c07/sip
14. R. GAYRAUD, "SIPp: performance testing tool for the SIP protoco," 2004-2005. [Online]. Available: http://sipp.sourceforge.net/ index.html