Abstract—Attacks on networks which implement VoIP could lead to the degradation of the IP PBX performance, the interception of conversations, the theft of important and confidential information, and the generation of large expenses in any organization, if they do not have the correct security mechanisms. VoIP is based on existing layers and protocols and therefore inherits their security issues. In relation to signalization, different protocols have been proposed for VoIP. However, the Session Initiation Protocol (SIP) tends to be the favorite one because it is standardized by the IETF and has many features. Similarly to any other Internet protocol, SIP is susceptible to security threads, and can be involved in different kinds of attacks. In this paper, we propose three basic scenarios, representing common fundamental network architectures for VoIP, from which more complex systems can be built. We also establish a set of policies and guidelines focused on the aforementioned architectures, in order to mitigate security threads and provide more effective solutions for existing vulnerabilities in VoIP.
Index Terms—Security, risk mitigation, VoIP, attacks, SIP, Elastix, Kali Linux.
Amelia Araneo and Dedaniel Urribarri are with the School of Computer Science, Central University of Venezuela, Los Chaguaramos, Caracas, Venezuela (e-mail: aaraneo7@gmail.com, dedanielu@gmail.com). Eric Gamess is with the Department of Mathematical, Computing, & Information Sciences, Jacksonville State University, Jacksonville, AL, USA (e-mail: egamess@jsu.edu).
[PDF]
Cite:Amelia Araneo, Eric Gamess, and Dedaniel Urribarri, "A Set of Policies and Guidelines for Deploying Safer VoIP Solutions," International Journal of Computer Theory and Engineering vol. 10, no. 2, pp. 46-53, 2018.
