|
1. |
Multiple design patterns for voice over IP (VoIP) security
Anwar, Z.; Yurcik, W.; Johnson, R.E.; Hafiz, M.; Campbell, R.H.;
Performance, Computing, and Communications Conference, 2006. IPCCC 2006. 25th IEEE International
10-12 April 2006
Page(s):8 pp.
Abstract:
Design patterns capture software solutions to specific problems that have evolved over time and reflect many iterations of work. Documenting such patterns promotes proven design and software reuse. There has been a growing amount of work documenting design patterns for security, however, little work specific to VoIP security. In 2005 NIST released a report on recommendations and best practices for securing VoIP, however it lacks the structure, terminology, and ease-of-understanding needed for both technical and non-technical audiences that is an inherent feature of design patterns. In this paper, we document three design patterns for VoIP implementations related to specific security problems: (1) secure traversal of firewalls and NATs; (2) detecting and mitigating DDoS attacks; and (3) securing against eavesdropping. With many VoIP vendors rushing products to market with overlapping functionality and requirements for interoperability, documenting design patterns is poised to become an important part of secure programming processes for VoIP.
|
Cart
