1 / 14

Ensuring Information Confidentiality and Securing SIP Messages

PROJECT PRESENTATION ON. By: Versha Thakur Shravani Aishwarya Sai Kamal. Ensuring Information Confidentiality and Securing SIP Messages. The Session Initiation Protocol (SIP) is a simple text-based protocol that is easy to understand.

kasie
Télécharger la présentation

Ensuring Information Confidentiality and Securing SIP Messages

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. PROJECT PRESENTATION ON By: Versha Thakur ShravaniAishwarya Sai Kamal Ensuring Information Confidentiality and Securing SIP Messages

  2. The Session Initiation Protocol (SIP) is a simple text-based protocol that is easy to understand. SIP has four major functions: a) Locate and end-point, b) Initiate a signal, c) Ensure compatibility and start a session, d) Terminate the session Introduction

  3. With SIP you have to solve five major problems: • Caller-I.D • Called Party I.D • Media Privacy • Media Authentication • Signaling Confidentiality Contd…

  4. There is no way of asserting that the calling party is an authenticated user/peer on the network. To understand the security detail & to suggest a better deployment technique. SIP security Issues

  5. Provides communication security over Internet. Session key used to encrypt data flowing between parties. Property : Forward Secrecy TLS is successor of SSL(Secure Socket Layer). Transport layer security (TLS)

  6. Library that asterisk requires to use TLS is not there. Old version of open SSL SIP registers work but secure TLS need to be secure with asterisk “Polycom” version of TLS could be outdated, compared to astersik- required new phones. SSL on phone & server are incompatible. Problems faced

  7. Whether or not all methods have been used. Few VoIP service providers use these techniques. No permanent reduction of the effects of SIP hacks & security related problems. SIP can revolutionize the VoIP industry now with the advent of VoLTE. But only if the security, media privacy and authentication issues are addressed and solved. Conclusion

  8. http://it.med.miami.edu/x904.xml http://www.tekelec.com/tekelec-blog/index.php/2010/06/sip-and-secure-communication-what-does-it-mean/#.Uo4vin9N-vU References

More Related