[SIPForum-discussion] Request for help and suggesstions

[Neill Wilkinsonj]

Read:

Asterisk Hacking by Ben Jackson et al (ISBN 978-1-59749-151-8)

Hacking Exposed - VoIP by David Endler & Mark Collier (ISBN
978-0-07-226364-0)

 

Then get yourself familiar with a number of different vendor phones and
ATAs: Cisco, Sipura, Snom for example.

 

Also get yourself a copy of Cain&Able, Sippy B2BUA, OpenSER and of course
Asterisk (use the version from the asterisk book above as a starter).

 

Now get familiar with Firewall and SBC techniques to show how these devices
can prevent some of the common attacks including using IPSec or SSL VPNs to
protect VoIP protocols.

 

Also look at the SIP stress tests that test a SIP stack for RFC compliance,
this will give you a good clue as to what are the easy ways to break a
non-conformant SIP implementation.

 

Apart from the cost of the books - all of the above won't cost you a penny -
just time.

 

Neill...;o)



Neill Wilkinson
Principal Consultant
  

Aeonvista Ltd - opening up new ideas

 

Email:  <mailto:neill.wilkinson at btinternet.com> neill.wilkinson@
<mailto:neill.wilkinson at btinternet.com> aeonvista.com


 

 

 

 

 

From: discussion-bounces at sipforum.org
[mailto:discussion-bounces at sipforum.org] On Behalf Of ateeq rahman
Sent: 29 June 2008 13:00
To: discussion at sipforum.org
Subject: [SIPForum-discussion] Request for help and suggesstions

 

 

 Hi Guyz,
 
I am a student of DIT,Dublin. I am about to start my thesis on VoIP threats
and vulnerabilities with SIP as main protocol. Can you people please give me
some ideas how can i test some of the attacks in my college Lab. What
equipment do i need.
 
It will do me a world of good, if u can please pour in ur ideas. My email is
ateeqrahman786 at gmail.com/ <mailto:gmail.com/ateeqrahman786 at hotmail.com>
ateeqrahman786 at hotmail.com <mailto:ateeqrahman786 at gmail.com/> 
 
 
Thank You

 

  _____  

Skydrive - Get 5GB online space for FREE!. Store and share music, photos and
documents online with ease. Try it now! <http://skydrive.live.com/> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://sipforum.org/pipermail/discussion/attachments/20080629/81b3f6b0/attachment-0002.html>