This authoritative and practical book offers a current and comprehensive understanding of VoIp (Voice over Ip) security. You learn how to design and implement secure VoIp networks and services, and how to integrate VoIp securely in existing data networks. You discover how emerging Ietf Sip and media security standards will affect future VoIp deployment, and how end-to-end encryption may be deployed to eventually protect all VoIp calls. The book explains Internet security basics, attack types and methods, and details all the key security aspects of a data and VoIp systems and networks, including identity, authentication, signaling, and media encryption. This practical resource discusses security architectures of perimeter vs. end-to-end security in terms of VoIp systems. You also find security approaches and architectures in related applications, such as the World Wide Web, Secure Shell, and the Pstn. A chapter on client and server security discusses general security of Internet hosts in a VoIp system. What's more, the book presents current techniques to combat spam and covers the future problems of spim (spam over instant messaging) and spit (spam over internet telephony).
Alan B. Johnston is a consulting member of the technical staff at Avaya. He holds a B.E.(Hons) in electrical and electronic engineering from the University of Melbourne, Australia and a Ph.D. in electrical engineering from Lehigh University. He is a co-author of the SIP specification RFC 3261 and several other SIP-related RFCs and servers on the Board of Directors of the SIP Forum.
David M. Piscitello is president and principal consultant of Core Competence, Inc. A 30-year network, Internet and security veteran, he provides advisory and consulting services to security and broadband access companies, service providers, and Fortune 100 companies. Mr. Piscitello has published hundreds of articles, product reviews, and editorials for print and online publications. He is a Fellow with the Internet Corporation for Assigned Names and Numbers on the Security and Stability Advisory Committee.