摘要
網際網路語音服務(VoIP)已經吸引眾多的注意。而SIP最大的優點在於整個架構簡單，十分具有彈性，還可和許多協定搭配使用，例如: SDP，衍生出更多變的功能, 提供更多貼心的服務。但因為SIP是建構在IP-Base的網路上，也是駭客最容易下手的地方，因此要能夠在IP-Base的網路上提供安全的傳輸，包括如何防止竊聽、如何辨識身分、如何防止其他惡意的攻擊等，都是SIP面臨的重大挑戰。 在這個論文中，我們實作出一套認證安全機制並且和現有的安全機制比較它們之間的效能。研究的結果告訴我們，我們的安全機制更能夠防禦網路惡意攻擊外，也可提供更有彈性的認證頻率提供更好的效能。
並列摘要
Session Initiation Protocol is the Internet Engineering Task Force (IETF) standard for IP telephony. SIP is one of the currently receiving much attention and seems to be the most promising signaling protocol for the current and future IP telephony services. For the realization of such a scenario, there is an obvious need to provide a certain level of quality and security, comparable to that provided by the traditional telephone systems. The problem of security is strictly related to the signaling mechanisms and the service provisioning model. For this reason, security support is a very hot topic in the SIP and IP telephony standardization. In our research, we focus on the problem of authentication providing a short tutorial on the solution under standardization. The architecture of a possible commercial IP telephony service including user authentication is also described. Finally, we focus on performance issues and analysis some security features. By means of a real testbed implementation, we provide an experimental performance analysis of the SIP security mechanisms, based on our source C# implementation of a SIP authentication server.
參考文獻
[1] J. Rosenberg, et. al., "SIP: Session Initiation Protocol", IETF RFC 3261, June 2002.
[5] A. Niemi, et. al., "Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA)", IETF RFC 3310, September 2002.
[10] S. Kent and R. Atkinson, “Security Architecture for the Internet Protocol”, IETF RFC 2401, Nov. 1998.
[17] Stefano Salsano, Luca Veltri, and Donald Papalilo, “SIP Security Issues: The SIP authentication procedure and its processing load”, IEEE Network, November/December 2002.
[2] M. Handley, et. al., "SDP: Session Description Protocol", IETF RFC 2327, April 1998.
延伸閱讀
- 童裕淇（2008）。以SIP為基礎之點對點多人會議系統設計與實作〔碩士論文，國立臺北科技大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0006-1808200816021500
- 曾朝弘（2007）。以SIP為基礎之會談移動性實作〔碩士論文，國立暨南國際大學〕。華藝線上圖書館。https://doi.org/10.6837/NCNU.2007.00032
- Huang, C. J. (2012). SIP網路電話核心技術之研究 [doctoral dissertation, National Taipei University of Technology]. Airiti Library. https://www.airitilibrary.com/Article/Detail?DocID=U0006-1306201209060100
- 林勤經、樊國楨、方仁威、黃景彰（2002）。A Study on the Implementation of Information Security Management Systems。資訊管理研究，4(2)，43-64。https://doi.org/10.6188/JEB.2002.4(2).02
- 吳政倫（2005）。Design and Implementation of Intrusion Detection System Based on IP/VPN for Enterprise〔碩士論文，亞洲大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0118-0807200916282988