Title :
Multiple design patterns for voice over IP (VoIP) security
Author :
Anwar, Zahid ; Yurcik, William ; Johnson, Ralph E. ; Hafiz, Munawar ; Campbell, Roy H.
Author_Institution :
Dept. of Comput. Sci., Univ. of Illinois at Urbana-Champaign
Abstract :
Design patterns capture software solutions to specific problems that have evolved over time and reflect many iterations of work. Documenting such patterns promotes proven design and software reuse. There has been a growing amount of work documenting design patterns for security, however, little work specific to VoIP security. In 2005 NIST released a report on recommendations and best practices for securing VoIP, however it lacks the structure, terminology, and ease-of-understanding needed for both technical and non-technical audiences that is an inherent feature of design patterns. In this paper, we document three design patterns for VoIP implementations related to specific security problems: (1) secure traversal of firewalls and NATs; (2) detecting and mitigating DDoS attacks; and (3) securing against eavesdropping. With many VoIP vendors rushing products to market with overlapping functionality and requirements for interoperability, documenting design patterns is poised to become an important part of secure programming processes for VoIP
Keywords :
Internet telephony; authorisation; open systems; telecommunication security; DDoS attack; NAT; VoIP security; documenting design pattern; firewall; interoperability; network address translator; secure programming process; voice over Internet protocol; Best practices; Computer science; Computer security; Data security; Internet telephony; NIST; National security; Network address translation; Sections; Software design;
Conference_Titel :
Performance, Computing, and Communications Conference, 2006. IPCCC 2006. 25th IEEE International
Conference_Location :
Phoenix, AZ
Print_ISBN :
1-4244-0198-4
DOI :
10.1109/.2006.1629443
