Vulnerabilidades VoIP: um estudo de caso sobre algumas vulnerabilidades existentes no protocolo SIP

• Autor(a) principal: Sousa, Bruno Bresciani de
• Data de Publicação: 2011
• Outros Autores: Espíndola, Raul
• Tipo de documento: Trabalho de conclusão de curso
• Idioma: por
• Título da fonte: Repositório Universitário da Ânima (RUNA)
• Texto Completo: https://repositorio.animaeducacao.com.br/handle/ANIMA/11209
• topic: SIP; Vulnerabilidades; Ataque; Segurança e VoIP

The VoIP technology is an increasingly widespread and used today. In organizations has become a trend and has increased its growth among users with Internet access. Due to its rise, many changes are made to improve communication, especially the creation of SIP (Session Initial Protocol) able to initiate, modify and terminate multimedia sessions by means of messages transmitted in plain text over the network. Despite the advantages offered by this technology, it brought some concerns, mainly related to the integrity of the information provided in the SIP protocol. Attacks that use vulnerabilities in this protocol may generate various damages, losses and bring those who use this type of communication. In this sense, the present work was to study and analyze some of these vulnerabilities in VoIP systems, focusing only on attacks on the SIP protocol. This analysis was performed using a scenario set up to simulate three vulnerabilities studied during the development, they are: theft record, flood attack and malicious messages. As a result of these simulations, it became apparent that the SIP protocol is a very fragile when it is unprotected, and these weaknesses can cause serious damage to the structure in that it provides communication. It is concluded that VoIP platforms using SIP for transport of information, should be implemented taking into account an added protection for this protocol, thus preventing malicious users will enjoy the same information.