Scholarlink

Voice over IP (VoIP) technology is a fundamental part of modern communications, progressively replacing traditional telephony. Its adoption spans across multiple domains including unified communications, smart environments, and critical infrastructure. However, this transition introduces significant cybersecurity risks due to Internet exposure, weak configurations, and protocol vulnerabilities. Common attacks exploit SIP methods such as REGISTER or INVITE to hijack sessions or conduct fraud. This paper presents VOISAM, a security assessment methodology tailored to VoIP systems. VOISAM guides auditors through reconnaissance, analysis, exploitation, and remediation, aligned with international standards and regulations.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

VoIP Information Security Assessment Methodology (VOISAM)

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • José Luis Verdeguer Navarro,
  • Higinio Mora Mora,
  • Francisco José Mora Gimeno

摘要

Voice over IP (VoIP) technology is a fundamental part of modern communications, progressively replacing traditional telephony. Its adoption spans across multiple domains including unified communications, smart environments, and critical infrastructure. However, this transition introduces significant cybersecurity risks due to Internet exposure, weak configurations, and protocol vulnerabilities. Common attacks exploit SIP methods such as REGISTER or INVITE to hijack sessions or conduct fraud. This paper presents VOISAM, a security assessment methodology tailored to VoIP systems. VOISAM guides auditors through reconnaissance, analysis, exploitation, and remediation, aligned with international standards and regulations.