Colloborative Research: CRI: A Testbed for Research and Development of Secure IP Multimedia Communication Services

合作研究：CRI：安全 IP 多媒体通信服务研究和开发的测试平台

• 批准号: 0551410
• 负责人: Sonia Fahmy
• 金额: $ 9.5万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-03-15 至 2009-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0551410&HistoricalAwards=false
• 关键词: Colloborative; Research; CRI; Testbed; Development

This collaborative project, developing a testbed that enables research on understanding and analysis of vulnerabilities of Voice over IP (VoIP), investigates issues related to Quality of Service (QoS) in VoIP, taking into account possible attacks, identity management, spamming, Denial of Service (DoS) attacks, 911 emergency management, and high availability. Research results will be translated to engineering guidelines for preventing security breaches during development and deployment of VoIP networks. This VoIP infrastructure can, in turn, be reused for different multimedia services like video and instant messaging. Since VoIP is expected to reach critical mass during the next five years, many federal agencies are already putting migration strategies in place. In view that VoIP will have to interoperate with conventional Public Switched Telephone Network (PSTN), this work anticipates discovery of security holes and vulnerabilities during deployment and usage. Thus, vulnerabilities need to be investigated proactively and algorithms and techniques need to be developed to secure VoIP from security threats due to interoperability problems, lack of standards, attacks by hackers, script kiddies, spammers, corporate espionage, and terrorism. This multi-university project limits the scope to spam prevention, defense against DoS, securing 911 emergency services, study the impact of security and QoS.Broader Impact: With 4 universities, this collaborative project studies security threats and solutions proactively and disseminates the results to commercial and government organizations. The research results should advance the research frontier in the area of security for next generation networks and create practical applications to implementation in VoIP networks. Results, translated into engineering guidelines, should impact developers. The experiments benefit from the geographically distributed sites while the test plan stimulates collaboration between faculty and students. Workshops have been held with participation from the Department of Homeland Security, Department of Defense, FBI, NSA, NIST, FCC, industry consortiums such as International Packet Communications Consortium (IPCC) and SIP.EDU in Internet2, VoPSF, VoIPSA, telecommunication service providers, vendors, and universities. This multi-university infrastructure provides an excellent opportunity for students to experience a real-life telecommunication network. This reconfigurable testbed may be integrated into many courses enabling new research and education in VoIP. .

这个合作项目，开发一个测试平台，使研究的理解和分析的脆弱性的IP语音（VoIP），调查相关的问题，服务质量（QoS）的VoIP，考虑到可能的攻击，身份管理，垃圾邮件，拒绝服务（DoS）攻击，911紧急管理，和高可用性。研究结果将转化为工程指导方针，以防止VoIP网络开发和部署过程中的安全漏洞。反过来，这种VoIP基础设施可以重新用于不同的多媒体服务，如视频和即时消息。由于VoIP预计将在未来五年内达到临界质量，许多联邦机构已经制定了迁移战略。鉴于VoIP将不得不与传统的公共交换电话网络（PSTN）进行互操作，这项工作预计在部署和使用过程中发现安全漏洞和漏洞。因此，需要主动调查漏洞，并开发算法和技术，以保护VoIP免受由于互操作性问题，缺乏标准，黑客攻击，脚本小子，垃圾邮件发送者，企业间谍和恐怖主义造成的安全威胁。这个多所大学合作的项目将范围限制在垃圾邮件预防、拒绝服务攻击防御、911紧急服务安全、研究安全和QoS的影响。更广泛的影响：这个合作项目与4所大学合作，积极研究安全威胁和解决方案，并将结果传播给商业和政府组织。研究成果将推动下一代网络安全领域的研究前沿，并为VoIP网络的实现创造实际应用。转化为工程指导方针的结果应该会影响开发人员。实验受益于地理分布的网站，而测试计划刺激教师和学生之间的合作。举办了研讨会，参加者包括国土安全部、国防部、联邦调查局、国家安全局、NIST、FCC、行业联盟，如国际分组通信联盟（IPCC）和Internet 2中的SIP.EDU、VoPSF、VoIPSA、电信服务提供商、供应商和大学。这种多大学的基础设施为学生提供了一个很好的机会，体验现实生活中的电信网络。这种可重新配置的测试平台可以集成到许多课程中，从而实现VoIP的新研究和教育。.