End to End Encryption Architecture for Voice over Internet Protocol

Abstract

Session Initiation Protocol (SIP) is an open standard protocol and constitutes the provisioning of services like Internet Telephony and Instant Messaging. Vulnerabilities in SIP have made it possible to exploit it and launch many of the known internet attacks and also few specific attacks, thus affecting the services deploying SIP for session management. To maintain the confidentiality and integrity of voice data security mechanisms need to be deployed. Currently available security measures do not take into account real time nature of data and are generic i.e. not optimized for VoIP technology. This paper presents new end to end encryption architecture for securing the VoIP calls which use SIP to establish their session taking into account the real time nature of data.

A study of SIP trunk security and challenges

“…A good study that uses the encryption to protect VoIP servers against brute force attack is presented in. [12]. Another study shows the detection system against SIPflooding attack that is caused by the brute force attack [13]- [14].…”