Modelo de seguridad contra ataques de denegación de servicio (DoS) de tráfico SIP en Servicios VoIP para redes LAN corporativas.

Abstract

In this investigation, a Security Model against Denial of Serviceattacks (DoS)for the SessionInitiation Protocol (SIP) in voice network over IP (VoIP)was implemented. The mainvulnerabilities and threats commonly found in VoIP environments were analyzed.For theconstruction of the proposed model, we analyze the Open Source Security Testing MethodologyManual(OSSTMM)2.1 and hacking techniques.We consider some recommendations of safetystandards and norms in VoIP environments. a)Recognize VoIP network, b) Identify SIPVulnerabilities and assess their Impact on Availability, c) Examine VoIP Network Security, d)Implement security measures.Throughthe implementation of the MS-DoS-SIP Security Model,in a simulated VoIP network environment, it was possible ti minimize the vulnerabilities in therelation of the same scenario without security mechanisms implemented by 92%. It wasrecommended to use an event correlation system in VoIP networks and future SIP securityrecommendations.