Colloborative Research: CRI: A Testbed for Research and Development of Secure IP Multimedia Communication Services

合作研究：CRI：安全 IP 多媒体通信服务研究和开发的测试平台

• 批准号: 0551538
• 负责人: Henning Schulzrinne
• 金额: $ 9.5万
• 依托单位: Columbia University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-03-15 至 2010-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0551538&HistoricalAwards=false
• 关键词: Colloborative; Research; CRI; Testbed; Development

This collaborative project, developing a testbed that enables research on understanding and analysis of vulnerabilities of Voice over IP (VoIP), investigates issues related to Quality of Service (QoS) in VoIP, taking into account possible attacks, identity management, spamming, Denial of Service (DoS) attacks, 911 emergency management, and high availability. Research results will be translated to engineering guidelines for preventing security breaches during development and deployment of VoIP networks. This VoIP infrastructure can, in turn, be reused for different multimedia services like video and instant messaging. Since VoIP is expected to reach critical mass during the next five years, many federal agencies are already putting migration strategies in place. In view that VoIP will have to interoperate with conventional Public Switched Telephone Network (PSTN), this work anticipates discovery of security holes and vulnerabilities during deployment and usage. Thus, vulnerabilities need to be investigated proactively and algorithms and techniques need to be developed to secure VoIP from security threats due to interoperability problems, lack of standards, attacks by hackers, script kiddies, spammers, corporate espionage, and terrorism. This multi-university project limits the scope to spam prevention, defense against DoS, securing 911 emergency services, study the impact of security and QoS.Broader Impact: With 4 universities, this collaborative project studies security threats and solutions proactively and disseminates the results to commercial and government organizations. The research results should advance the research frontier in the area of security for next generation networks and create practical applications to implementation in VoIP networks. Results, translated into engineering guidelines, should impact developers. The experiments benefit from the geographically distributed sites while the test plan stimulates collaboration between faculty and students. Workshops have been held with participation from the Department of Homeland Security, Department of Defense, FBI, NSA, NIST, FCC, industry consortiums such as International Packet Communications Consortium (IPCC) and SIP.EDU in Internet2, VoPSF, VoIPSA, telecommunication service providers, vendors, and universities. This multi-university infrastructure provides an excellent opportunity for students to experience a real-life telecommunication network. This reconfigurable testbed may be integrated into many courses enabling new research and education in VoIP. .

这个合作项目开发了一个测试平台，可以研究理解和分析IP语音（VoIP）的漏洞，研究与VoIP服务质量（QoS）相关的问题，考虑到可能的攻击、身份管理、垃圾邮件、拒绝服务（DoS）攻击、911紧急情况管理和高可用性。研究结果将转化为在VoIP网络开发和部署过程中防止安全漏洞的工程指南。这种VoIP基础设施反过来又可以用于不同的多媒体服务，如视频和即时消息。由于VoIP预计将在未来五年内达到临界质量，许多联邦机构已经制定了迁移策略。鉴于VoIP必须与传统的公共交换电话网（PSTN）互操作，本工作预计在部署和使用过程中会发现安全漏洞和漏洞。因此，需要主动调查漏洞，需要开发算法和技术来保护VoIP免受互操作性问题、缺乏标准、黑客攻击、脚本kiddy、垃圾邮件发送者、企业间谍和恐怖主义的安全威胁。这个多所大学的项目将范围限制在垃圾邮件预防，防御DoS，保护911紧急服务，研究安全性和QoS的影响。更广泛的影响：该合作项目与4所大学合作，积极研究安全威胁和解决方案，并将结果传播给商业和政府组织。研究成果将推动下一代网络安全领域的研究前沿，并为VoIP网络的实现创造实际应用。结果，转化为工程指导方针，应该影响开发人员。实验受益于地理上分散的地点，而测试计划促进教师和学生之间的合作。参加研讨会的有国土安全部、国防部、联邦调查局、国家安全局、国家标准与技术研究所、联邦通信委员会，以及国际分组通信联盟（IPCC）和SIP等行业联盟。Internet2、VoPSF、VoIPSA、电信服务提供商、供应商和大学的EDU。这个多所大学的基础设施为学生提供了一个体验真实电信网络的绝佳机会。这个可重新配置的测试平台可以集成到许多课程中，使VoIP的新研究和教育成为可能。