Research Of Security On Voip

VoIP, developed from a value-added application on the internet, is now becoming a widely used communication technology,VoIP shares the same infrastructure with date network; It can reduce the cost of long distance voice communication; provide some new kinds of service that traditional network do not has; its economic, flexibility and mobility characteristic improve enterprise efficiency. These obvious advantages make it more and more popular among enterprise.Although VoIP owns the advantage of both PSTN network and internet network, it also owns the same risks from both networks. Compare to PSTN network, VoIP traffic go through internet network or private network. VoIP not only will be attacked by eavesdrop like it did in PSTN, but also be attacked by virus, DoS that from data network. The security issue with VoIP becomes more and more evident when VoIP service enters business area. Some enterprises simply take advantage of VoIP, but they do not understand the security issue of VoIP deployment. This will not only impact enterprise business, it will bring risk and lost to enterprise.This article will introduce the basic concept of VoIP; the two main signaling standards H.323 and SIP; analyze the security issue of VoIP system; introduce the security concept for VoIP; provide the elementary methods for network infrastructure and connectivity; provide some additional suggestions to protect VoIP network.In the end, this article designs a simple, effective and complete solution to secure VoIP system for enterprise. It uses SRTP to protect media stream; uses TLS to protect registration process between IP Phones and SIP server. An authentication server is placed in normal SIP platform to provide both-way authentication between user agent and authentication server.