New research aims to plug holes in VOIP before they happen

April 4, 2006
New research aims to plug holes in VOIP before they happen
A University of North Texas-led collaboration is developing a geographically distributed, secure test bed to analyze Voice over Internet Protocol (VoIP) vulnerabilities. VoIP allows people to make toll-free phone calls over the Internet. Some 24 million U.S. households are predicted to use the new technology by 2008. The test bed projecct aims to identify security issues and solutions before damage is done. Credit: Nicolle Rager Fuller, NSF

The National Science Foundation has issed four awards totaling $600,000 to the University of North Texas to lead a multi-university collaboration to develop a geographically distributed, secure test bed to analyze vulnerabilities in Voice over Internet Protocol (VoIP)--an increasingly popular technology that turns audio signals into digital data that can be transmitted over the Internet.

The three-year project will investigate voice spam prevention (VoIP phone systems can be spammed like email), attacks on networks and Internet resources that render them unavailable (denial-of-service), quality of service, and 911 service dependability. The unique test bed will also be used to discover security holes arising from operating VoIP with conventional phone networks.

"Proactively securing the next-generation infrastructure for voice communications is critical for us all," said UNT's Ram Dantu, who leads the project. "Our research will identify vulnerabilities in the technology and establish solutions--before damage is done."

VoIP allows users with a computer and a standard Internet connection to make toll-free calls any where in the world. It also handles video and instant messaging. Companies such as Vonage and AT&T are aggressively deploying the technology, and one study predicts some 24 million U.S. households will be using VoIP by 2008. Government agencies are already implementing strategies to use VoIP-based systems.

History generally credits Alexander Graham Bell with inventing the telephone in 1876, but in 1880 he devised "the greatest invention I have ever made; greater than the telephone." The photophone, patented by Bell and Charles Sumner Tainter, transmitted sound on a beam of light using the same principles as today's fiber optic communications systems.

When Bell and Tainter used the only existing photophone to communicate between two buildings in Washington, D.C., guarding the content of their message was probably not an issue, but today, secure communications systems are a top priority.

Rita Virginia Rodriguez, the NSF program director who oversees the project, said, "VoIP security requires immediate attention, and this research addresses a number of critical aspects needed to help prevent imminent threats." Rodriguez believes the work will have immediate and long-term impact for the technology, and importantly, will provide faculty and students at each university with real-life telecommunications research experience.

Since last year, NSF has supported Dantu to investigate specific methods to prevent voice spamming. Karl Levitt, who directs NSF's CyberTrust program commented, "Dantu has a keen awareness of the nation's vital need to expedite research into VoIP security. His work identifying and applying intrusion detection methods will help alleviate the nuisance created by spam and fits well with the goals of the new test bed award."

In addition to UNT, the project includes researchers and resources at Columbia University, Purdue University and the University of California-Davis.

The team is committed to disseminating their findings throughout academia, industry and government, giving all technology developers guidelines for preventing security breaches. Already, their VoIP security workshops have been well attended by organizations including the Department of Homeland Security, the Federal Communications Commission, the National Institute of Standards and Technology and the National Security Agency.

Source: National Science Foundation

Explore further: Ga. Tech, BellSouth, Internet Security Systems initiate VoIP security research partnership

Related Stories

PGP founder unveils new VoIP security

March 23, 2006

Somewhere out there, someone is a little too curious about your data. This is the main concern of Phil Zimmermann, the creator of the industry standard PGP (Pretty Good Privacy) e-mail encryption protocol who has just debuted ...

View from the Top: VoIP comes of age

August 4, 2005

Voice over Internet Protocol has emerged as an increasingly popular alternative to traditional phone connections for its ability to transport voice communications over data networks like the Internet.

Viseon Launches World's First Digital Home Telephone for VoIP

January 4, 2005

Viseon, Inc., a global developer of broadband personal communications solutions, today announced the launch of the next generation VisiFone at the Consumer Electronics Show (CES) in Las Vegas on January 6th. The newly designed ...

Security researchers find vulnerability in Cisco VoIP phones

December 19, 2012

(Phys.org)—Ang Cui a fifth year PhD student at Columbia University, has given a demonstration at this year's Amphion Forum in San Francisco, showing a security vulnerability he and colleagues have discovered in Cisco VoIP ...

Recommended for you

Defend or grow? These plants do both

August 30, 2016

From natural ecosystems to farmers' fields, plants face a dilemma of energy use: outgrow and outcompete their neighbors for light, or defend themselves against insects and disease.

The rise and fall of galaxy formation

August 30, 2016

An international team of astronomers, including Carnegie's Eric Persson, has charted the rise and fall of galaxies over 90 percent of cosmic history. Their work, which includes some of the most sensitive astronomical measurements ...

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.