SANS InfoSec Reading Room - VOIP Issues

Most of the computer security white papers in the Reading Room have been written by students seeking GIAC certification to fulfill part of their certification requirements and are provided by SANS as a resource to benefit the security community at large. SANS attempts to ensure the accuracy of information, but papers are published "as is". Errors or inconsistencies may exist or may be introduced over time as material becomes dated. If you suspect a serious error, please contact webmaster@sans.org.

Featuring 9 papers as of May 21, 2013

Security Considerations for Avaya ESS Implementation

By: Thomas McDermott (posted on December 29, 2008)

Skype: A Practical Security Analysis

By: Bert Hayes (posted on October 15, 2008)

The purpose of this paper is to suggest best practices and recommendations when running Skype.

VoIP Security Vulnerabilities

By: David Persky (posted on December 21, 2007)

Security Issues and Countermeasure for VoIP

By: Jianqiang Xin (posted on February 7, 2007)

This paper focuses on these VoIP specific security threats and the countermeasures to mitigate the problem.

Voice Over Internet Protocol (VoIP) and Security

By: Greg Tucker (posted on January 17, 2005)

This paper will describe Voice Over Internet Protocol (VoIP) to a level that allows discussion of security issues and concerns. Business concerns of implementing VoIP, components of a VoIP system, and relevant security issues and concerns as they apply to the topics, are explored.

The VoIP Dilemma

By: Fernando Robles (posted on August 15, 2004)

This paper intends to discuss the general security concerns that need to be considered during the design and implementations of a VoIP (Voice over Internet Protocol) converged infrastructure.

Latency and QoS for Voice over IP

By: Karie Gonia (posted on March 20, 2004)

This paper will familiarize the reader with the fundamentals of a VoIP (Voice over IP) implementation and its effects. VoIP has been a front runner for companies looking to take advantage of IP.

Secure Voice Over IP

By: Brian Stringfellow (posted on October 31, 2003)

The purpose of this document is to give a general overview of Voice over IP (VoIP) and to explain the essential security issues surrounding a successful VoIP deployment.

Security Concerns with VOIP

By: Eric Weiss (posted on October 31, 2003)

This paper will briefly discuss the following IP telephony standards: H.323 from the ITU, Session Initiation Protocol (SIP) from the IETF,and MGCP by the Media Control Working Group.