Security in VoIP Systems

Amit Luthra, Waqas Ashraf

AbstractThe purpose of this thesis has been to analyze the security in VoIP systems as more companies migrate to converged networks consisting of both voice and data.

The security risks and Quality-of-Service issues related to VoIP systems that arise when implementing VoIP have been analyzed in depth. This includes detailed descriptions of attack methods and possible mitigation actions to reduce the risks of the attacks. The mitigation actions provide the motivation and goal of the project - to provide security best practices and general recommendations for securing a VoIP system. Additionally, existing VoIP solutions, offered by vendors today, are examined from a security and functional point of view. The thesis also gives an introduction of a new concept by Voiceline for VoIP systems intended for use in closed networks. To give the thesis a more practical perspective, Elsam A/S, a company considering migrating to a VoIP system, have listed their requirements for such a system. The thesis ends by evaluating whether these requirements can be met by implementing a VoIP system.
KeywordsVoIP, security, risks, QoS, MPLS, SIP, H.323
TypeMaster's thesis [Industrial collaboration]
Year2005
PublisherInformatics and Mathematical Modelling, Technical University of Denmark, DTU
AddressRichard Petersens Plads, Building 321, DK-2800 Kgs. Lyngby
SeriesIMM-Thesis-2005-63
NoteIn the publicly available version of this report, certain sections, which in the original version contained confidential information, have been omitted. Thesis supervised by Prof. Robin Sharp, IMM
Electronic version(s)[pdf]
BibTeX data [bibtex]
IMM Group(s)Computer Science & Engineering