We present a survey of authentication and key agreement schemes that are proposed for the SIP protocol. SIP has become the center piece for most VoIP architectures. Performance and security of the authentication and key agreement schemes are two critical factors that affect the VoIP applications with large number of users. Therefore, we have identified, categorized and evaluated various SIP authentication and key agreement protocols according to their performance and security features. Although the performance is inversely proportional to the security features provided in general, we observed that there are successful schemes from both the performance and security viewpoint.

A Survey of SIP Authentication and Key Agreement Schemes

Recent booming growth of networking-based solutions have brought numerous challenges to security and privacy from both perspectives of insider and outsider threats. The encrypted data are relatively considered a safe storage status; however, the process of encrypting data is still facing adversarial actions and data process generally is inapplicable over ciphertexts. As a type of the encryption approach allowing computations over ciphertexts, a fully homomorphic encryption (FHE) can concurrently deal with the adversarial hazards and support computations on ciphertexts. This paper focuses on the issue of blend arithmetic operations over real numbers and proposes a novel tensor-based FHE solution. The proposed approach is called a FHE for blend operations model that uses tensor laws to carry the computations of blend arithmetic operations over real numbers. In our paper, we provide both theoretical proof and experimental evaluations in order to evince the adoptability of the proposed approach.

Blend Arithmetic Operations on Tensor-Based Fully Homomorphic Encryption Over Real Numbers

We present a comprehensive survey of Voice over IP security academic research, using a set of 245 publications forming a closed cross-citation set. We classify these papers according to an extended version of the VoIP Security Alliance (VoIPSA) Threat Taxonomy. Our goal is to provide a roadmap for researchers seeking to understand existing capabilities and to identify gaps in addressing the numerous threats and vulnerabilities present in VoIP systems. We discuss the implications of our findings with respect to vulnerabilities reported in a variety of VoIP products. We identify two specific problem areas (denial of service, and service abuse) as requiring significant more attention from the research community. We also find that the overwhelming majority of the surveyed work takes a black box view of VoIP systems that avoids examining their internal structure and implementation. Such an approach may miss the mark in terms of addressing the main sources of vulnerabilities, i.e., implementation bugs and misconfigurations. Finally, we argue for further work on understanding cross-protocol and cross-mechanism vulnerabilities (emergent properties), which are the byproduct of a highly complex system-of-systems and an indication of the issues in future large-scale systems.

/pdf/a-comprehensive-survey-of-voice-over-ip-security-research-12md93jxpa.pdf

A Comprehensive Survey of Voice over IP Security Research

The aim of this book is to provide comprehensive coverage of current state of the art theoretical and technological aspects of broadband mobile and wireless networks focusing on Long Term Evolution Network. The presentation starts from basic principles, and proceeds to the most advanced topics. Provided schemes are developed and oriented in the context of actual closed standards of the IEEE working groups and the 3 GPPP LTE. Also this book will focus on the understanding of the LTE technology as well as the study of its performance in terms of mobility, quality of service, security, resource allocation.

Understanding LTE and its Performance

The session initiation protocol (SIP) is an authentication protocol used in 3G mobile networks. In 2009, Tsai proposed an authenticated key agreement scheme as an enhancement to SIP. Yoon et al. later pointed out that the scheme of Tsai is vulnerable to off-line password guessing attack, Denning–Sacco attack, and stolen-verifier attack and does not support perfect forward secrecy (PFS). Yoon et al. further proposed a new scheme with PFS. In this paper, we show that the scheme of Yoon et al. is still vulnerable to stolen-verifier attack and may also suffer from off-line password guessing attack. We then propose several countermeasures for solving these problems. In addition, we propose a new security-enhanced authentication scheme for SIP. Our scheme also maintains low computational complexity. Copyright © 2011 John Wiley & Sons, Ltd.

A new authenticated key agreement for session initiation protocol

The open architecture of the Internet and the use of open standards like Session Initiation Protocol (SIP) constitute the provisioning of services (e.g., Internet telephony, instant messaging, presence, etc.) vulnerable to known Internet attacks, while at the same time introducing new security problems based on these standards that cannot been tackled with current security mechanisms. This article identifies and describes security problems in the SIP protocol that may lead to denial of service. Such security problems include flooding attacks, security vulnerabilities in parser implementations, and attacks exploiting vulnerabilities at the signaling-application level. A qualitative analysis of these security flaws and their impacts on SIP systems is presented.

Karlovassi Sven Ehlert

Papers

Survey of security vulnerabilities in session initiation protocol