Colloborative Research: CRI: A Testbed for Research and Development of Secure IP Multimedia Communication Services

该合作项目开发了一个测试平台，能够研究和分析 IP 语音 (VoIP) 的漏洞，研究与 VoIP 服务质量 (QoS) 相关的问题，同时考虑到可能的攻击、身份管理、垃圾邮件、拒绝服务 (DoS) 攻击、911 应急管理和高可用性。研究结果将转化为工程指南，以防止 VoIP 网络开发和部署过程中出现安全漏洞。该 VoIP 基础设施又可以重新用于不同的多媒体服务，例如视频和即时消息传递。由于 VoIP 预计将在未来五年内达到临界规模，因此许多联邦机构已经制定了迁移策略。鉴于 VoIP 必须与传统的公共交换电话网络 (PSTN) 互操作，这项工作预计会在部署和使用过程中发现安全漏洞和漏洞。因此，需要主动调查漏洞，并开发算法和技术来保护 VoIP 免受因互操作性问题、缺乏标准、黑客攻击、脚本小子、垃圾邮件发送者、企业间谍活动和恐怖主义造成的安全威胁。这个多大学项目将范围限制在垃圾邮件预防、DoS 防御、确保 911 紧急服务安全、研究安全和 QoS 的影响。更广泛的影响：这个合作项目与 4 所大学合作，主动研究安全威胁和解决方案，并将结果传播给商业和政府组织。研究成果应推进下一代网络安全领域的研究前沿，并为 VoIP 网络的实施创造实际应用。结果转化为工程指南，应该会影响开发人员。实验受益于地理上分布的地点，而测试计划则刺激了教师和学生之间的合作。国土安全部、国防部、FBI、NSA、NIST、FCC、国际分组通信联盟 (IPCC) 和 SIP.EDU in Internet2、VoPSF、VoIPSA 等行业联盟、电信服务提供商、供应商和大学都参加了研讨会。这种多大学基础设施为学生提供了体验现实生活电信网络的绝佳机会。这个可重新配置的测试平台可以集成到许多课程中，从而实现 VoIP 的新研究和教育。 。

This collaborative project, developing a testbed that enables research on understanding and analysis of vulnerabilities of Voice over IP (VoIP), investigates issues related to Quality of Service (QoS) in VoIP, taking into account possible attacks, identity management, spamming, Denial of Service (DoS) attacks, 911 emergency management, and high availability. Research results will be translated to engineering guidelines for preventing security breaches during development and deployment of VoIP networks. This VoIP infrastructure can, in turn, be reused for different multimedia services like video and instant messaging. Since VoIP is expected to reach critical mass during the next five years, many federal agencies are already putting migration strategies in place. In view that VoIP will have to interoperate with conventional Public Switched Telephone Network (PSTN), this work anticipates discovery of security holes and vulnerabilities during deployment and usage. Thus, vulnerabilities need to be investigated proactively and algorithms and techniques need to be developed to secure VoIP from security threats due to interoperability problems, lack of standards, attacks by hackers, script kiddies, spammers, corporate espionage, and terrorism. This multi-university project limits the scope to spam prevention, defense against DoS, securing 911 emergency services, study the impact of security and QoS.Broader Impact: With 4 universities, this collaborative project studies security threats and solutions proactively and disseminates the results to commercial and government organizations. The research results should advance the research frontier in the area of security for next generation networks and create practical applications to implementation in VoIP networks. Results, translated into engineering guidelines, should impact developers. The experiments benefit from the geographically distributed sites while the test plan stimulates collaboration between faculty and students. Workshops have been held with participation from the Department of Homeland Security, Department of Defense, FBI, NSA, NIST, FCC, industry consortiums such as International Packet Communications Consortium (IPCC) and SIP.EDU in Internet2, VoPSF, VoIPSA, telecommunication service providers, vendors, and universities. This multi-university infrastructure provides an excellent opportunity for students to experience a real-life telecommunication network. This reconfigurable testbed may be integrated into many courses enabling new research and education in VoIP. .