SIP Security (Hardcover)

While the standards and products for VoIP and SIP services have reached market maturity, security and regulatory aspects of such services are still being discussed. SIP itself specifies only a basic set of security mechanisms that cover a subset of possible security issues. In this book, the authors survey important aspects of securing SIP-based services. This encompasses a description of the problems themselves and the standards-based solutions for such problems. Where a standards-based solution has not been defined, the alternatives are discussed and the benefits and constraints of the different solutions are highlighted.

Key Features:

• Will help the readers to understand the actual problems of using and developing VoIP services, and to distinguish between real problems and the general hype of VoIP security
• Discusses key aspects of SIP security including authentication, integrity, confidentiality, non-repudiation and signalling
• Assesses the real security issues facing users of SIP, and details the latest theoretical and practical solutions to SIP Security issues
• Covers secure SIP access, inter-provider secure communication, media security, security of the IMS infrastructures as well as VoIP services vulnerabilities and countermeasures against Denial-of-Service attacks and VoIP spam

This book will be of interest to IT staff involved in deploying and developing VoIP, service users of SIP, network engineers, designers and managers. Advanced undergraduate and graduate students studying data/voice/multimedia communications as well as researchers in academia and industry will also find this book valuable.

這本書詳細介紹了SIP特定的安全問題以及如何解決這些問題。儘管VoIP和SIP服務的標準和產品已經達到市場成熟，但這些服務的安全和監管方面仍在討論中。SIP本身只規定了一套基本的安全機制，涵蓋了可能的安全問題的一部分。在這本書中，作者們對保護基於SIP的服務的重要方面進行了調查。這包括對問題本身的描述以及針對這些問題的基於標準的解決方案。對於尚未定義基於標準的解決方案的情況，將討論替代方案並突出不同解決方案的優點和限制。

主要特點包括：
- 幫助讀者了解使用和開發VoIP服務的實際問題，並區分真正的問題和VoIP安全的普遍炒作。
- 討論SIP安全的關鍵方面，包括身份驗證、完整性、機密性、不可否認性和信令。
- 評估SIP用戶面臨的真正安全問題，並詳細介紹SIP安全問題的最新理論和實踐解決方案。
- 包括安全的SIP訪問、跨供應商的安全通信、媒體安全、IMS基礎設施的安全以及VoIP服務的漏洞和對抗阻斷服務攻擊和VoIP垃圾郵件的對策。

這本書將對參與部署和開發VoIP的IT人員、使用SIP服務的服務用戶、網絡工程師、設計師和管理人員感興趣。高年級本科生和研究生研究數據/語音/多媒體通信的同時，學術界和工業界的研究人員也會發現這本書有價值。