Voice over IP security

	See also...  Organization of the courses  Training sessions planning
Goals  Duration  Instructor(s)  Pre-requisite for attendants  Teaching method  Related courses  Material  Agenda  Methods of inscription

	Dates of the coming sessions: 25 May 2010 (Paris) Dates subject to modification without prior notice. The sessions will only take place if the number of registered attendants is high enough.

 

Based on the experience of the HSC consultants, gathered through several audits and penetration tests on VoIP platforms, the VoIP security tutorial presents the most important points to know in order to manager the security of a VoIP infrastructure.

Abundantly illustrated with examples and demonstrations, done using software freely available (and, thus reproductible by the trainees), the VoIP security course is interactive and allows the discovery of often underrated aspects of the security of such systems.

At the end of this course, the trainees will be able to secure their VoIP architecture, and maintain a good level of security.

Present the main protocols used in VoIP (H.323, SIP, MGCP, Megaco/H.248, RTP) and their uses, while focusing on security aspects. Best practices will be detailed to implement secured architectures and real-world attacks on VoIP will be presented along with means to protect from them.

1 day.

Guillaume Lehembre (Guillaume.Lehembre@hsc.fr) and Olivier Dembour (Olivier.Dembour@hsc.fr)

People involved in the deployment/planning of a VoIP solution, willing to reduce the risks linked to this technology: IT manager, security manager, network manager, technical project leader, telecom/network engineer, security engineer, network and security administrator, security auditor... Prior knowledge of TCP/IP protocols is necessary.

Lecture, with numerous demonstrations.

• Introduction

• Présentation de la VoIP
• Atouts / Inconvénients
• Principaux équipementiers
• Solutions Softphone (Skype, etc.)
• Codage / Qualité de la voix

• Protocoles courants dans la VoIP (H.323, SIP, MGCP, Megaco/H.248, RTP)
• Usages
• Architecture
• Filtrage
• Mécanismes de sécurité
• Extensions de sécurité
• Protocoles media transport (RTP, RTCP, RTSP, etc.)

• Problématiques de sécurité dans la VoIP
• Risques introduits par la VoIP
• Exemples de vulnérabilités découvertes
• Sécurité des équipements de voix
• Sécurité des terminaux
• Le chiffrement dans la VoIP

• Architecture
• Exemples pratiques
• QoS

• Conclusion

For registering an HSC course, please contact our training department by phone : +33 141 409 704 or by email at formations@hsc.fr, with first and last name of every student, your postal address and your company VAT number. Thoses informations enable us to send your the training agreement. The training agreement must be return agreed with signature and company stamp with you purchase order, at least 6 days before the course. The purchase order should precise your billing address and our payment regulations : net 30 days from our invoice date. Registration is completed as soon as we received those two documents.