Author: Valter Popeskic

Attack on SIP protocol – VoIP Vulnerability

The Attack of SIP protocol

We previously discussed in this blog the SIp protocol. We have also said that “Session Initiation Protocol” (SIP) is becoming popular quite fast and it has also achieved quick acceptance in “mixed-vendor VoIP networks”. One of the most striking properties of SIP is its use of “existing protocols”. And by default, SIP messages are sometimes sent in the form of plain (normal) text.

This is quite unfortunate as the very properties that make SIP striking can also be leveraged by attackers to make a compromise regarding the security of a particular SIP network.

VoIP Security – Main Targets of VoIP Attacks

VoIP SecurityThese days IP phones are easily obtainable and abundant in many corporate fields, they have become striking targets for attackers. Also VoIP administrators should keep an eye against VoIP differences, of fishing and spam as both are very popular in e-mail fields, and also as toll fraud, which is rather frequent in PBX fields. This article is about mentioning all the popular attack targets for a VoIP network and seeing how there are deployed.

 

BGP – Border Gateway Protocol

BGP is the Internet routing protocol. He is making the Internet work.

BGP protocol performs actions by maintaining IP networks table for the biggest network in the world – The Internet. The BGP protocol, as a code of behavior, supported core routing decisions over the Internet.  Instead of using traditional IGP (Interior Gateway Protocol) metrics, BGP protocol relies upon available path, network guidelines and rule-sets for routing decision making purposes. And just for this feature, it is sometimes expressed as a reachability protocol. The main idea behind the BGP creation was to replace the EGP (Exterior Gateway Protocol) to permit a complete decentralized routing. NSFNET backbone is the best example of a decentralized system.

DHCP – Dynamic Host Configuration Protocol

DHCP – Dynamic Host Configuration Protocol is a configuration protocol for the host’s set of connections on the IP networks. Obviously, computers within IP networks should be configured to communicate with each other. But some other information is needed to understand the mechanical of online communication such as IP (internet protocol) addresses, default routes and prefixes. DHCP protocol will let you to get rid of manual handling of certain tasks with a network administrator’s help. A central database should be connected to a network, if this protocol incorporated into it so the chances relating duplicating resource assignments can be eliminated.