SECURING VOIP NETWORKS: THREATS, VULNERABILITIES, AND COUNTERMEASURES
CHAPTER 1: INTRODUCTION CHAPTER 2: VOIP ARCHITECTURES AND PROTOCOLS CHAPTER 3: THREATS AND ATTACKS CHAPTER 4: VOIP VULNERABILITIES CHAPTER 5: SIGNALING PROTECTION MECHANISMS CHAPTER 6: MEDIA PROTECTION MECHANISMS CHAPTER 7: KEY MANAGEMENT MECHANISMS CHAPTER 8: VOIP AND NETWORK SECURITY CONTROLS CHAPTER 9: A SECURITY FRAMEWORK FOR ENTERPRISE VOIP NETWORKS CHAPTER 10: PROVIDER ARCHITECTURES AND SECURITY 315 FOREWORD XIV PREFACE XVII ACKNOWLEDGMENTS XX ABOUT THE AUTHORS XXIII VOIP AND TELECOMMUNICATIONS VOIP AND IP COMMUNICATIONS VOIP DEPLOYMENTS CHALLENGES IN VOIP SECURITY RISK ANALYSIS FOR VOIP VOIP AS PART OF IT AND THE SECURITY ORGANIZATION SECURITY CERTIFICATIONS SUMMARY ARCHITECTURES VOIP NETWORK COMPONENTS SIGNALING PROTOCOLS MEDIA TRANSPORT PROTOCOLS OTHER IP PROTOCOLS USED IN VOIP DEFINITIONS OF THREATS AND ATTACKS THREATS IN VOIP SERVICE DISRUPTION ATTACKS RELATED TO TELEPHONY SERVICES DENIAL OF SERVICE ANNOYANCE (THAT IS, SPIT) UNAUTHORIZED ACCESS EAVESDROPPING MASQUERADING FRAUD CATEGORIES OF VULNERABILITIES CONFIGURATION MANAGEMENT VULNERABILITIES IN VOIP APPROACHES TO VULNERABILITY ANALYSIS HUMAN BEHAVIOR VULNERABILITIES SIP PROTECTION MECHANISMS TRANSPORT LAYER SECURITY DATAGRAM TRANSPORT LAYER SECURITY S/MIME IPSEC H 323 PROTECTION MECHANISMS MGCP PROTECTION MECHANISMS SRTP SRTCP MIKEY SRTP SECURITY DESCRIPTIONS ZRTP ARCHITECTURAL CONSIDERATIONS AUTHENTICATION, AUTHORIZATION, AND AUDITING: DIAMETER USER-AUTHORIZATION-REQUEST COMMAND VOIP FIREWALLS AND NAT SESSION BORDER CONTROLLERS INTRUSION DETECTION AND VOIP VOIP SECURITY POLICY EXTERNAL PARTIES ASSET MANAGEMENT PHYSICAL AND ENVIRONMENTAL SECURITY EQUIPMENT SECURITY OPERATIONS MANAGEMENT ACCESS CONTROL INFORMATION SYSTEMS ACQUISITION, DEVELOPMENT, AND MAINTENANCE SECURITY INCIDENT MANAGEMENT BUSINESS CONTINUITY MANAGEMENT COMPLIANCE CHAPTER 10: PROVIDER ARCHITECTURES AND SECURITY COMPONENTS NETWORK TOPOLOGIES