Colloborative Research: CRI: A Testbed for Research and Development of Secure IP Multimedia Communication Services

合作研究：CRI：安全 IP 多媒体通信服务研究和开发的测试平台

• 批准号: 0551538
• 负责人: Henning Schulzrinne
• 金额: $ 9.5万
• 依托单位: Columbia University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-03-15 至 2010-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0551538&HistoricalAwards=false
• 关键词: Colloborative; Research; CRI; Testbed; Development

This collaborative project, developing a testbed that enables research on understanding and analysis of vulnerabilities of Voice over IP (VoIP), investigates issues related to Quality of Service (QoS) in VoIP, taking into account possible attacks, identity management, spamming, Denial of Service (DoS) attacks, 911 emergency management, and high availability. Research results will be translated to engineering guidelines for preventing security breaches during development and deployment of VoIP networks. This VoIP infrastructure can, in turn, be reused for different multimedia services like video and instant messaging. Since VoIP is expected to reach critical mass during the next five years, many federal agencies are already putting migration strategies in place. In view that VoIP will have to interoperate with conventional Public Switched Telephone Network (PSTN), this work anticipates discovery of security holes and vulnerabilities during deployment and usage. Thus, vulnerabilities need to be investigated proactively and algorithms and techniques need to be developed to secure VoIP from security threats due to interoperability problems, lack of standards, attacks by hackers, script kiddies, spammers, corporate espionage, and terrorism. This multi-university project limits the scope to spam prevention, defense against DoS, securing 911 emergency services, study the impact of security and QoS.Broader Impact: With 4 universities, this collaborative project studies security threats and solutions proactively and disseminates the results to commercial and government organizations. The research results should advance the research frontier in the area of security for next generation networks and create practical applications to implementation in VoIP networks. Results, translated into engineering guidelines, should impact developers. The experiments benefit from the geographically distributed sites while the test plan stimulates collaboration between faculty and students. Workshops have been held with participation from the Department of Homeland Security, Department of Defense, FBI, NSA, NIST, FCC, industry consortiums such as International Packet Communications Consortium (IPCC) and SIP.EDU in Internet2, VoPSF, VoIPSA, telecommunication service providers, vendors, and universities. This multi-university infrastructure provides an excellent opportunity for students to experience a real-life telecommunication network. This reconfigurable testbed may be integrated into many courses enabling new research and education in VoIP. .

这个合作项目开发了一个试验台，能够研究了解和分析VoIP(VoIP)的漏洞，调查与VoIP中的服务质量(Qos)相关的问题，考虑到可能的攻击、身份管理、垃圾邮件、拒绝服务(DoS)攻击、911紧急管理和高可用性。研究成果将转化为工程指南，以防止在开发和部署VoIP网络期间出现安全漏洞。反过来，该VoIP基础设施可以重复用于不同的多媒体服务，如视频和即时消息。由于VoIP预计将在未来五年内达到临界值，许多联邦机构已经在实施迁移战略。鉴于VoIP将不得不与传统的公共交换电话网(PSTN)进行互操作，这项工作预计会在部署和使用过程中发现安全漏洞和漏洞。因此，需要主动调查漏洞，并开发算法和技术来保护VoIP免受互操作性问题、缺乏标准、黑客攻击、脚本儿童、垃圾邮件发送者、企业间谍和恐怖主义等安全威胁。这个多大学项目将范围限制在垃圾邮件防御、DoS防御、保护911紧急服务、研究安全和服务质量的影响。广泛影响：这个与4所大学合作的项目主动研究安全威胁和解决方案，并将结果传播给商业和政府组织。研究成果将推动下一代网络安全领域的研究前沿，并为在VoIP网络中的实现创造实际应用。转化为工程指南的结果应该会影响开发人员。实验得益于地理上分布的地点，而测试计划促进了教师和学生之间的合作。研讨会的参与者包括国土安全部、国防部、FBI、NSA、NIST、FCC、国际分组通信联盟(IPCC)和SIP.EDU in Internet2、VoPSF、VoIPSA、电信服务提供商、供应商和大学。这种由多所大学组成的基础设施为学生提供了体验真实电信网络的绝佳机会。这一可重新配置的试验床可以集成到许多课程中，从而实现新的VoIP研究和教育。。