Assessing the security of VoIP Services - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2007

Assessing the security of VoIP Services

Radu State
  • Function : Author
  • PersonId : 755670
  • IdRef : 059893591
Isabelle Chrisment
Cristian Popi
  • Function : Author
  • PersonId : 840073

Abstract

VoIP networks are in a major deployment phase and are becoming widely spread out due to their extended functionality and cost efficiency. Meanwhile, as VoIP traffic is transported over the Internet, it is the target of a range of attacks that can jeopardize its proper functionality. In this paper we describe our work in a VoIP specific security assessment framework. Such an assessment is automated with integrated discovery actions, data management and security attacks allowing to perform VoIP specific penetration tests. These tests are important because they permit to search and detect existing vulnerabilities or misconfigured devices and services. Our main contributions consist in an elaborated network information model capable to be used in VoIP assessment, an extensible assessment architecture and its implementation, as well as in a comprehensive framework for defining and composing VoIP specific attacks.
Fichier principal
Vignette du fichier
11-01.PDF (305.75 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

inria-00148363 , version 1 (22-05-2007)
inria-00148363 , version 2 (12-06-2007)

Identifiers

  • HAL Id : inria-00148363 , version 2

Cite

Humberto Abdelnur, Radu State, Isabelle Chrisment, Cristian Popi. Assessing the security of VoIP Services. The Tenth IFIP/IEEE International Symposium on Integrated Network Management - IM 2007, IEEE Communication Society, May 2007, Munich, Germany. pp.373-382. ⟨inria-00148363v2⟩
131 View
704 Download

Share

Gmail Facebook Twitter LinkedIn More