Colloborative Research: CRI: A Testbed for Research and Development of Secure IP Multimedia Communication Services

合作研究：CRI：安全 IP 多媒体通信服务研究和开发的测试平台

• 批准号: 0551410
• 负责人: Sonia Fahmy
• 金额: $ 9.5万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-03-15 至 2009-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0551410&HistoricalAwards=false
• 关键词: Colloborative; Research; CRI; Testbed; Development

This collaborative project, developing a testbed that enables research on understanding and analysis of vulnerabilities of Voice over IP (VoIP), investigates issues related to Quality of Service (QoS) in VoIP, taking into account possible attacks, identity management, spamming, Denial of Service (DoS) attacks, 911 emergency management, and high availability. Research results will be translated to engineering guidelines for preventing security breaches during development and deployment of VoIP networks. This VoIP infrastructure can, in turn, be reused for different multimedia services like video and instant messaging. Since VoIP is expected to reach critical mass during the next five years, many federal agencies are already putting migration strategies in place. In view that VoIP will have to interoperate with conventional Public Switched Telephone Network (PSTN), this work anticipates discovery of security holes and vulnerabilities during deployment and usage. Thus, vulnerabilities need to be investigated proactively and algorithms and techniques need to be developed to secure VoIP from security threats due to interoperability problems, lack of standards, attacks by hackers, script kiddies, spammers, corporate espionage, and terrorism. This multi-university project limits the scope to spam prevention, defense against DoS, securing 911 emergency services, study the impact of security and QoS.Broader Impact: With 4 universities, this collaborative project studies security threats and solutions proactively and disseminates the results to commercial and government organizations. The research results should advance the research frontier in the area of security for next generation networks and create practical applications to implementation in VoIP networks. Results, translated into engineering guidelines, should impact developers. The experiments benefit from the geographically distributed sites while the test plan stimulates collaboration between faculty and students. Workshops have been held with participation from the Department of Homeland Security, Department of Defense, FBI, NSA, NIST, FCC, industry consortiums such as International Packet Communications Consortium (IPCC) and SIP.EDU in Internet2, VoPSF, VoIPSA, telecommunication service providers, vendors, and universities. This multi-university infrastructure provides an excellent opportunity for students to experience a real-life telecommunication network. This reconfigurable testbed may be integrated into many courses enabling new research and education in VoIP. .

该协作项目开发了一个测试台，可以研究和分析IP语音漏洞（VOIP）的研究，并考虑了VoIP中与服务质量（QOS）有关的问题，考虑到可能的攻击，身份管理，垃圾邮件管理，拒绝服务（DOS）攻击，911紧急管理和高可用性。研究结果将转化为工程指南，以防止在VoIP网络开发和部署过程中安全漏洞。反过来，这种VoIP基础架构可以重复使用视频和即时消息等不同的多媒体服务。由于预计VoIP在未来五年内将达到临界质量，因此许多联邦机构已经在制定了移民策略。考虑到VOIP必须与常规的公共交换电话网络（PSTN）进行互操作，这项工作预计在部署和使用过程中发现了安全孔和漏洞。因此，需要对脆弱性进行积极的调查，并且需要开发算法和技术，以确保由于互操作性问题，缺乏标准，黑客攻击，脚本孩子，垃圾邮件发送者，垃圾邮件发送者，公司间谍活动和恐怖主义而造成的安全威胁。这个多元大学项目限制了预防垃圾邮件的范围，防止DOS，确保911紧急服务，研究安全和QoS的影响。Broader的影响：Boshover Implast：有4所大学，该协作项目研究安全威胁和解决方案主动主动将结果散布到商业和政府组织。研究结果应推进下一代网络安全领域的研究边界，并在VoIP网络中创建实用应用程序。结果转化为工程指南，应影响开发人员。这些实验受益于地理分布的站点，而测试计划刺激了教师与学生之间的合作。国土安全部，国防部，联邦调查局，NSA，NIST，FCC，国际包装通信财团（IPCC）（IPCC）和sip.edu参加了研讨会。这种多元大学基础架构为学生提供了现实生活电信网络的绝佳机会。该可重新配置的测试床可以整合到许多课程中，从而在VoIP中进行新的研究和教育。 。