Securing VoIP Networks


In Securing VoIP Networks, two leading experts systematically review thesecurity risks and vulnerabilities associated with VoIP networks andoffer proven, detailed recommendations for securing them. Drawing oncase studies from their own fieldwork, the authors address VoIP securityfrom the perspective of real-world network implementers, managers, andsecurity specialists. The authors identify key threats to VoIP networks,including eavesdropping, unauthorized access, denial of service,masquerading, and fraud; and review vulnerabilities in protocol design,network architecture, software, and system configuration that placenetworks at risk. They discuss the advantages and tradeoffs associatedwith protection mechanisms built into SIP, SRTP, and other VoIPprotocols; and review key management solutions such as MIKEY and ZRTP.Next, they present a complete security framework for enterprise VoIPnetworks, and provide detailed architectural guidance for both serviceproviders and enterprise users.