Voice over IP Security Training Class

1. A Brief History of Hacking

• Phreaking
  
  
  
  • In-Band vs. Out-of-Band Signaling
  
  
  • Blue, Red, & Beige Boxes
  
  
  • Theft of Service
  
  
  • YIPL/TAP (Youth International Party Line/Technical Assistance Program)
  
  
  
  

2. Network Security Concepts

• Confidentiality, Integrity, Availability (CIA)
  
  
  
  • Network Attacks
    
    
    
    • Man In The Middle (MITM)
    
    
    • Replay
    
    
    • Denial of Service (DoS)
    
    
    
    
  
  
  
  


• Physical Perimeter


• Network Segmentation
  
  
  
  • Virtual Local Area Network (VLAN)
  
  
  • Firewalls
  
  
  
  


• Authentication
  
  
  
  • Port-Based Network Access Control (NAC)
  
  
  • 802.1x
  
  
  • Remote Authentication Dial-In User Service (RADIUS)
  
  
  
  


• Authorization


• Security Policies & Enforcement


• Intrusion Detection/Prevention Systems (IDS)


• Cryptography
  
  
  
  • Encryption Concepts
  
  
  • Shared Secret
  
  
  • Asymmetric Key
  
  
  • Secure Key Exchange
  
  
  • Public Key Infrastructure (PKI)
  
  
  • Digital Certificates
  
  
  
  


• Virtual Private Network (VPN) Protocols
  
  
  
  • Internet Protocol Security (IPSec)
  
  
  • Transport Layer Security (TLS)
  
  
  • Datagram Transport Layer Security (DTLS)
  
  
  • Secure Shell (SSH)
  
  
  
  

3. Overview of VoIP

• VoIP Architecture


• Addressing
  
  
  
  • ENUM
  
  
  • SIP URI
  
  
  
  


• Signaling
  
  
  
  • SIP
  
  
  • MGCP
  
  
  • H.323
  
  
  • SCCP
  
  
  
  


• Media Channel
  
  
  
  • RTP
  
  
  • RTCP
  
  
  
  

4. VoIP Threats and Attacks

• VoIP Service Provider Attacks
  
  
  
  • Service Disruption or Denial
  
  
  • Theft of Service
  
  
  • Infrastructure Attacks
  
  
  • Identity Fraud
  
  
  • Call Hijacking
  
  
  • VoIP Eavesdropping
  
  
  • Voicemail Hacking
  
  
  
  


• VoIP Enterprise and Endpoint Attacks
  
  
  
  • OS Exploits
  
  
  • Signaling Attacks
  
  
  • Endpoint Admin Privilege Exploits
  
  
  • Proxy Impersonation
  
  
  • RTP Attacks
  
  
  • VoIP Wiretapping
  
  
  • VoWiFi Attacks
    
    
    
    • Wired Equivalent Privacy (WEP)
    
    
    • WiFi Protected Access (WPA)
    
    
    
    
  
  
  • DoS Attacks
  
  
  • Spam for Internet Telephony (SPIT)
  
  
  • IP PBX and Telephony Server Exploits
  
  
  • Vishing (VoIP Phishing)
  
  
  
  

5. Countermeasures

• Authentication


• Signaling Security
  
  
  
  • Secure SIP
  
  
  • TLS
  
  
  
  


• VoIP Firewall Traversal
  
  
  
  • Firewall Classifications
  
  
  • Network Address Translation (NAT)
  
  
  • Simple Traversal of UDP thru NAT (STUN)
  
  
  • Traversal of UDP via Relay NAT (TURN)
  
  
  • Interactive Connectivity Establishment (ICE)
  
  
  
  


• Session Border Controller
  
  
  
  • RTP Stream Conversion
  
  
  • Firewall Interoperability
  
  
  • Denial of Service Protection
  
  
  • Call Filtering
  
  
  • Bandwidth Management
  
  
  
  


• Media Encryption
  
  
  
  • SecureRTP (SRTP)
  
  
  • VPN
    
    
    
    • IPSec
    
    
    • SSL
    
    
    
    
  
  
  • Zfone
  
  
  
  

6. Penetration Testing

• Windows Tools
  
  
  
  • Cain & Abel
  
  
  • SIP Messenger
  
  
  • SiVuS VoIP Vulnerability Scanner
  
  
  • SIPScan
  
  
  • SIPProxy
  
  
  • WireShark
  
  
  
  


• Linux Tools
  
  
  
  • Nmap
  
  
  • Nessus
  
  
  • Registration Hijacker
  
  
  • Invite Flood
  
  
  • RTPMixSound
  
  
  • RTPInsertSound
  
  
  • UDPFlood
  
  
  • RTPFlood
  
  
  • RedirectPoison
  
  
  • SIPBomber
  
  
  • SIP_rogue
  
  
  • WireShark
  
  
  
  

7. Summary

• Related Standards


• VoIP Security Resources

System administrators or telecomm managers who have deployed or are looking
to deploy a Voice over IP network.

• Strong networking and telephony skills


• Voice over IP Foundations is highly recommended