Penetrační testy v IP telefonii

Abstract

The diploma thesis deals with penetration tests with a focus on a signalling protocol SIP and elements of SIP infrastructure. The work begins with the detailed description of the protocol SIP, protocols UDP, SDP, RTP and its two protected versions SRTP and ZRTP, which are used for the transfer of the multimedia content. Next chapters contain a description of the most frequent attacks in IP telephony, the topology of the tested network and tools that were chosen for penetration tests. In the next-to-last chapter are performed the attacks by different tools, and divided into categories of attacks from the second chapter. The last part of the thesis focuses on the security rules worked out on the basis of the tests’ results.