VOIP SECURITY

• US 20070177615A1
• Filed: 01/11/2007
• Published: 08/02/2007
• Est. Priority Date: 01/11/2006
• Status: Abandoned Application

• Current Assignee: NetClarity, Inc. (Jacobs Solutions, Inc.)
• Original Assignee: NetClarity, Inc. (Jacobs Solutions, Inc.)
• Inventors: Miliefsky, Gary
• Application Number:
  US11/622,460
• Publication Number:
  US 20070177615A1
• Time in Patent Office: Days
• US Class Current: 370/401
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 65/1079 of unsolicited session attempts, e.g. SPIT
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention

Abstract

Disclosed herein are techniques for protecting VoIP networks by defending against malicious traffic and malicious access to the systems and networks used for the transmission, storage and management of VoIP data, including defense against weaknesses inherent in VoIP, Local Area Network (LAN), Wide Area Network (WAN) and Internet networks used to carry VoIP traffic.

Claims

1. A method for securing a VoIP system comprising:

auditing a network containing a plurality of assets to identify one or more of the plurality of assets associated with a VoIP system; and

identifying one or more vulnerabilities associated with the one or more of the plurality of assets.

2. The method of claim 1 wherein identifying one or more vulnerabilities includes comparing a dictionary of common vulnerabilities and exploits to the one or more of the plurality of assets.

3. The method of claim 1 further comprising monitoring the network to detect changes in the one or more of the plurality of assets associated with the VoIP system and, in response to a detected change, identifying any additional vulnerabilities.

4. The method of claim 3 wherein the detected change includes an addition of a VoIP phone.

5. The method of claim 4 further comprising reconfiguring the network to secure the network against the additional vulnerabilities associated with the VoIP phone.

6. The method of claim 1 wherein identifying one or more vulnerabilities includes periodically updating a dictionary of common vulnerabilities and exploits.

7. The method of claim 1 further comprising reconfiguring the network to secure the one or more of the plurality of assets against the one or more vulnerabilities.

8. The method of claim 7 wherein reconfiguring the network includes securing an existing hole in a VoIP phone.

9. The method of claim 7 wherein reconfiguring the network includes securing an existing hole in a VoIP gateway.

10. The method of claim 6 wherein reconfiguring the network includes securing an existing hole in a VoIP firewall.

11. A method for securing a VoIP system comprising:

auditing a network to identify a plurality of network assets;

identifying one or more vulnerabilities associated with a VoIP resource intended for use with the network; and

reconfiguring the network to secure the network against the one or more vulnerabilities.

12. The method of claim 11 further comprising connecting the VoIP resource to the network.

13. The method of claim 12 wherein the resource includes an administrative interface to a VoIP network.

14. The method of claim 12 wherein the VoIP resource includes a VoIP phone.

15. The method of claim 12 wherein the VoIP resource includes a VoIP gateway.

16. A method of securing a VoIP system comprising:

auditing a network to identify one or more assets associated with a VoIP system;

monitoring the one or more assets of the VoIP system to identify VoIP traffic; and

analyzing the VoIP traffic for the presence of a security threat.

17. The method of claim 16 further comprising creating an alert when a security threat is detected.

18. The method of claim 16 further comprising terminating a VoIP connection when a security threat is detected.

19. The method of claim 16 wherein analyzing the VoIP traffic includes identifying at least one of a malformed VoIP packet, an unexpected traffic pattern, and an unexpected VoIP session.

20. The method of claim 16 wherein analyzing the VoIP traffic includes at least one of intrusion detection, network sniffing, exploit signature detection, and heuristic monitoring.

21. The method of claim 16 further comprising enforcing at least one Quality of Service constraint on VoIP traffic.