Fuzzing for vulnerabilities in the VoIP space - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2008

Fuzzing for vulnerabilities in the VoIP space

Radu State
  • Function : Author
  • PersonId : 755670
  • IdRef : 059893591

Abstract

Voice over IP is emerging as the key technology in the current and future Internet. This paper shares some essential practical experience gathered over a two years period in searching for vulnerabilities in the VoIP space. We will show a terrifying landscape of the most dangerous vulnerabilities capable to lead to a complete compromise of an internal network. All of the described vulnerabilities have been disclosed responsibly by our group and were discovered using our in-house developed fuzzing software KIF. The paper provides also mitigation techniques for all described vulnerabilities.
No file

Dates and versions

inria-00326086 , version 1 (01-10-2008)

Identifiers

  • HAL Id : inria-00326086 , version 1

Cite

Humberto Abdelnur, Radu State, Olivier Festor. Fuzzing for vulnerabilities in the VoIP space. 17th EICAR Annual Conference, May 2008, Laval, France. ⟨inria-00326086⟩
76 View
0 Download

Share

Gmail Facebook X LinkedIn More