|
Podcast - SIP/VoIP Attacks
 Technology Columnist
Most importantly, understand your opponent has more time, is more focused and is more eager to attack you. While SIP brings advancement in VoIP call connections, SIP faces the same security attacks as other IP protocols like HTTP  and SMTP such as:
- Malformed message attacks
- SPIT (SPam over Internet Telephony (News - Alert))
- Buffer overflow attacks
- VOMIT (Voice Over Misconfigured Telephony)
- DOS attacks (overload, part SYN, FIN)
- Eavesdropping
- Masquerading (Trojan Horses) as a phone, user, server, as a customer
- Calljacking/hijacking
- RTP/RTCP session teardown attacks
- RTP/RTCP malformed messages
- RTP/RTCP buffer overflow attaches
- RTP play-out or Media spamming
- X-rated voice and video “crosstalk”
- SDP changing CODECs attacks
- Injection of malicious RTP packets into existing RTP flows…
…and other known and yet to be created attacks.
The animated tutorial helps explain how the process works. More in-depth discussion and analysis can be found in the course. Hacker comes from the term hack, which is slang that software programmers use to describe writing computer programs. Cracker comes from safe/vault crackers to break/crack into a vault safe. White Hat Hacker is a good or trusted programmer and Black Hat is a bad or untrusted disgruntled person whose desire is to cause injury or disrupt computer systems. Grey Hat is a programmer of uncertain intent.
This free presentation is produced and presented by TECHtionary.com and is available in Adobe Flash (.swf), Quicktime (.mov), audio-only (.mp3) and iPod/iPhone ( News - Alert) (.mv4) formats for download at: http://www.bizcastingonline.com/educate/media/podcasts/security for the next week when it will be removed unless you are part of the TECHtionary dealer program where there is no expiration. Podcast tutorials, animations and online courses are free to channel partners — see terms and conditions at http://www.techtionary.com/techu/.
Hypertext Transfer Protocol (HTTP) | X | | HTTP is a standard protocol used to transfer data. Here are two views of HTTP:
- TCP/IP and network processes of HTTP
- A view of the role of the internet and routers used to process HTTP....more |
Real Time Transport Protocol (RTP) | X | | Real-time Control Protocol is used in VoIP signaling and RTP is used to send and receive the voice. However, RTCP/RTP are used with other protocols. Voice is generally encapsulated in UDP without re...more |
[ Back To TMCnet.com's Homepage ]
|
INDUSTRIES
INDUSTRIES
Find Solutions for Enterprises, SMBs & Service Providers at the INTERNET TELEPHONY Conference and EXPO East, February 2-4, 2009. Miami, Florida.
