Multilayer Secured SIP Based VoIP Architecture

Abstract

Abstract-VoIP faces many emerging attacks and threats. securing SIP based VoIP is a major challenging task, hence confidentiality, integrity, availability, as well as authenticity must be provided. Focusing on three main critical attacks targeting SIP based VoIP infrastructure, which are Denial of service (DoS), man-in-the middle attack, and Authenticity based attacks. In this paper the main contribution is providing a secure efficient multilayer security architecture based on open source applications (snort, snortsam and iptables, as well as OPENVPN Tunnel), The architecture provides a secure reliable VoIP services for the enterprise network, that have been deployed based on asterisk PBX. The proposed security architecture aims to prevent the mentioned critical attacks, to provide CIAA security services, by proposing an adaptive rule based queuing polices. QoS is a major challenge, the paper also provides an enhancement for the proposed architecture to minimize the delay for more efficient secure communication, as well as preventing zero day attacks by exploiting method and updating Snort DB with attack signatures. QoS factors have been measured using OPNET simulators. The proposed architecture gives promising results when it comes to attacks prevention with 0.01% better performance results compared to previous work.

Securing Session Initiation Protocol

“…Basem et al [ 62 ] provided a multilayered security solution based on different open-source applications: Snort, IPtables, SnortSam, and OpenVPN tunnel. The design provided reliable and secure VoIP services for users to prevent denial-of-service and eavesdropping attacks.…”

Voip Packet Analyzer for Detecting Threats in Sip Network

“…Its greater support for mobility, interoperability and multimedia made it scalable beyond VoIP calls. [1] It acts similar to HTTP with its request and response structure .This protocol is used to create sessions and to carry session descriptions that allow participants to agree on multimedia capability. The functions of this protocol are to :1) determine the location of an endpoint or user to be used for communication.…”

“…The speech transmission protocols are classified into User Datagram Protocol(UDP), Real Time Transport Protocol (RTP) and Transmission Control Protocol(TCP) [1] . The standards and protocols for VoIP management are DHCP (Dynamic Host Configuration Protocol) , ENUM (Electronic Number Mapping system), RSVP (Resource Reservation Protocol) , BGP (Border Gateway Protocol) and COPS (Common Open Policy Service).…”