Security analysis and solutions for deploying IP telephony in the Critical Infrastructure

Workshop of the 1st International Conference on Security and Privacy for Emerging Areas in Communication Networks, 2005

Volumn 2005, Issue , 2005, Pages 165-174

  Cao, Feng ^a   Malik, Saadat ^a  

^a CISCO SYSTEMS   (United States)

Author keywords

IP telephony; Security; Voice over IP critical infrastructure

Indexed keywords

DATA PRIVACY; DATA TRANSFER; PUBLIC KEY CRYPTOGRAPHY; SECURITY OF DATA; TELECOMMUNICATION SERVICES;

CRITICAL INFRASTRUCTURE; VOICE OVER IP (VOIP);

INTERNET TELEPHONY;

EID: 33847048641     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECCMW.2005.1588311     Document Type: Conference Paper

References (29)

1. J. Rosenberg, et. al., RFC-3261, SIP: Session Initiation Protocol
2. ITU-T Recommendation H.323 Packet-based Multimedia Communications Systems
3. M. Handley, et. al, RFC-2327, SDP: Session Description Protocol
4. J. Rosenberg, et. al., internet draft, draft-ietf-mmusic-ice-04.txt
5. Anonymous, IP Telephony Security in Depth, Cisco white paper.
6. NIST SP 800-58, Security Considerations for Voice Over IP Systems
7. Alan Klein, Security Analysis: Traditional Telephony and IP Telephony, SANS Institute
8. F. Cao, et. al., Call Filtering and Tracking in IP Telephony, Proceeds of IASTED International Conference on Internet and Multimedia Systems and Applications (IMSA 2003)
9. F. Cao, C. Jennings, Enhancements for Response Identity and Authentication in Session Initiation Protocol, draft-ietf-sip-response-authen-00
10. F. Cao, et. al., Requirements for IP-based Government Emergency Telephony Service, Cisco internal document.
11. A. Flemming, et. al., internet draft, Session Description Protocol Security Descriptions for Media Streams, draft-ietf-mmusic-sdescriptions-09.txt
12. J. Rosenberg, et. al., RFC-3489, STUN
13. J. Rosenberg, et. al., internet draft, TURN, draft-rosenberg-midcom-turn- 07
14. M. Arango, et. al., RFC-2705, MGCP
15. Anonymous, Protecting Critical Infrastructure and Key Assets, white paper.
16. J. Larson, et. al., Defending VoIP Networks from DdoS attacks, Globecom 2004 VoIP Security Workshop
17. D. Atkins, et. al., RFC 3833, Threat Analysis of the Domain Name System (DNS)
18. B. Wellington, RFC 3007, Secure Domain Name System,
19. D. Eastlake III, RFC 2535, Domain Name System Security Extensions,
20. ITU, H.323 Annex F. J
21. ITU-T Recommendation, H.235 Security and encryption for H-Series (H.323 and other H.245-based) multimedia terminals
22. ITU, H.235 Annex D, F, G, H
23. J. Peterson, "A Privacy Mechanism for the Session Initiation Protocol (SIP)", RFC. 3323, November 2002.
24. J. Peterson, and C. Jennings, "Enhancements for Authenticated Identity Management in the Session Initialization Protocol", draft-ietf-sip-identity-04
25. C. Jennings, and J. Peterson, "Certificate Management Service for the Session Initialization Protocol", draft-ietf-sipping-certs-01
26. J. Peterson, "Session Initiation Protocol (SIP) Authenticated Identity Body (AID) Format", RFC 3893, September 2004.
27. C. Jennings, Peterson, J. and M. Watson, "Private Extensions to the Session Initiation Protocol (SIP) for Asserted Identity within Trusted Networks", RFC 3325, November 2002.
28. H. Schulzrinne, "The TEL URI for Telephone Numbers", RFC 3966, December 2004.
29. B. Baugher, et. al. "The Secure Real-time Transport Protocol", RFC 3711, March 2004.