VoIP%20

1
VoIP Security Considerations

• An Examination
• Ricardo Estevez
• CS 522 / Computer Communication
• Fall 2003

2
Security Considerations

• Prevent outside (inside) attackers
• 3 security measures that MUST be implemented
• H.323 Registration, Admission, Status (RAS)
  Authentication
• Network Access Security
• Device Security
• Other measures include physical site security,
  security management, audit trails, logs

3
H.323 Registration, Admission, Status (RAS)
Authentication

• H.235 Security defines the protocol of exchanging
  digital certificates between gateway and
  gatekeeper
• Cisco uses Challenge Handshake Authentication
  Protocol (CHAP)-like security procedure

4
H.323 Registration, Admission, Status (RAS)
Authentication
5
Network Access Security

• Protect VoIP network from malicious IP or PSTN
  interfaces
• Some security mechanisms
• Virtual local-area networks (VLANs) can separate
  voice traffic, voice signaling, and data traffic
• RADIUS Server grants authentication to trusted
  devices

6
Device Security

• Protect the physical devices from improper
  configurations
• Use passwords
• Set permissions

7
References

• Durkin, James F. Voice-Enabling the Data Network.
  Cisco Press Indianapolis, IN, 2003
• ISBN 1-58705-014-5