Multiple design patterns for voice over IP (VoIP) security

Author

Anwar, Zahid ; Yurcik, William ; Johnson, Ralph E. ; Hafiz, Munawar ; Campbell, Roy H.

Author_Institution

Dept. of Comput. Sci., Univ. of Illinois at Urbana-Champaign

fYear

2006

fDate

10-12 April 2006

Lastpage

492

Abstract

Design patterns capture software solutions to specific problems that have evolved over time and reflect many iterations of work. Documenting such patterns promotes proven design and software reuse. There has been a growing amount of work documenting design patterns for security, however, little work specific to VoIP security. In 2005 NIST released a report on recommendations and best practices for securing VoIP, however it lacks the structure, terminology, and ease-of-understanding needed for both technical and non-technical audiences that is an inherent feature of design patterns. In this paper, we document three design patterns for VoIP implementations related to specific security problems: (1) secure traversal of firewalls and NATs; (2) detecting and mitigating DDoS attacks; and (3) securing against eavesdropping. With many VoIP vendors rushing products to market with overlapping functionality and requirements for interoperability, documenting design patterns is poised to become an important part of secure programming processes for VoIP

Keywords

Internet telephony; authorisation; open systems; telecommunication security; DDoS attack; NAT; VoIP security; documenting design pattern; firewall; interoperability; network address translator; secure programming process; voice over Internet protocol; Best practices; Computer science; Computer security; Data security; Internet telephony; NIST; National security; Network address translation; Sections; Software design;

fLanguage

English

Publisher

ieee

Conference_Titel

Performance, Computing, and Communications Conference, 2006. IPCCC 2006. 25th IEEE International

Conference_Location

Phoenix, AZ

Print_ISBN

1-4244-0198-4

Type

conf

DOI

10.1109/.2006.1629443

Filename

1629443