Hacking VOIP
Protocols, Attacks, and Countermeasures

Voice over Internet Protocol (VoIP) networks, the technology used to place phone calls through the Internet, suffer from the same security holes as standard IP networks. This book reviews the many possible VoIP attacks, and discusses the best defenses against them.

Voice Over Internet Protocol (VoIP) networks, the technology used to place phone calls through the Internet, suffer from the same security holes as standard IP networks, as well as new threats specific to telephony. In addition to attacks on network availability and authentication, administrators must contend with eavesdropping, audio injection, Caller ID spoofing, VoIP phishing, and other unique exploits. All of these security holes can result in the leakage of information and in unreliable phone calls. Hacking VoIP reviews the many possible VoIP attacks, and discusses the best defenses against them for both enterprise and home VoIP solutions. Author Himanshu Dwivedi introduces popular security assessment tools, describes the inherent vulnerabilities of common hardware and software packages, and provides the first ever VoIP security audit program. The book covers common enterprise VoIP protocols such as SIP and RTP as well as unique protocols like H.323 and IAX.

DEDICATIONACKNOWLEDGMENTSINTRODUCTIONChapter 1: AN INTRODUCTION TO VOIP SECURITYPart I: VOIP PROTOCOLS* Chapter 2: SIGNALING: SIP SECURITY* Chapter 3: SIGNALING: H.323 SECURITY* Chapter 4: MEDIA: RTP SECURITY* Chapter 5: SIGNALING AND MEDIA: IAX SECURITYPart II: VOIP SECURITY THREATS* Chapter 6: ATTACKING VOIP INFRASTRUCTURE* Chapter 7: UNCONVENTIONAL VOIP SECURITY THREATS* Chapter 8: HOME VOIP SOLUTIONSPart III: ASSESS AND SECURE VOIP* Chapter 9: SECURING VOIP* Chapter 10: AUDITING VOIP FOR SECURITY BEST PRACTICESCOLOPHON