VoIP 스니핑을 통한 특정정보 탈취 위험성에 관한 연구
A study on the risk of taking out specific information by VoIP sniffing technique
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Recently, VoIP technology is widely used in our daily life. Even VoIP has become a technology that can be easily accessed from services such as home phone as well as KakaoTalk.[1] Most of these Internet telephones use the RTP protocol. However, there is a vulnerability that the audio data of users can be intercepted through packet sniffing in the RTP protocol. So we want to create a tool to check the security level of a VoIP network using the RTP protocol. To do so, we capture data packet from and to these VoIP networks. For this purpose, we first configure a virtual VoIP network using Raspberry Pi and show the security vulnerability by applying our developed sniffing tool to the VoIP network. We will then analyze the captured packets and extract meaningful information from the analyzed data using the Google Speech API. Finally, we will address the causes of these vulnerabilities and possible solutions to address them.
Abstract
Recently, VoIP technology is widely used in our daily life. Even VoIP has become a technology that can be easily accessed from services such as home phone as well as KakaoTalk.[1] Most of these Internet telephones use the RTP protocol. However, there is a vulnerability that the audio data of users can be intercepted through packet sniffing in the RTP protocol. So we want to create a tool to check the security level of a VoIP network using the RTP protocol. To do so, we capture data packet from and to these VoIP networks. For this purpose, we first configure a virtual VoIP network using Raspberry Pi and show the security vulnerability by applying our developed sniffing tool to the VoIP network. We will then analyze the captured packets and extract meaningful information from the analyzed data using the Google Speech API. Finally, we will address the causes of these vulnerabilities and possible solutions to address them.
참고문헌 (10)
- "KakaoTalk"[URL]
- "Channel Driver Modules"[URL]
- H. Schulzrinne, "RTP: A Transport Protocol for Real-Time Applications., RFC3550", The Internet Society, ~ (2003)
- H. Schulzrinne, "RTP Profile for Audio and Video Conferences with Minimal Control.,RFC3551", The Internet Society, ~ (2003)
- "RTP Packetization"[URL]
- Patrick Park, "Voice over IP Security" (2009), Cisco Press
- Himanshu Dwivedi, "Hacking VoIP" (2009), No Starch Press
- Laura Chappell, "와이어샤크 네트워크 완전 분석" (2012), 에이콘
- 김태경, "텍스트마이닝을 이용한 정보보호 연구동향 분석", (사)디지털산업정보학회 논문지, 14(2), pp.19~25 (2018), (사)디지털산업정보학회[DOI]
- 최희식, "모바일 앱 서비스 이용 증가로 인한 보안 위협 분석", (사)디지털산업정보학회 논문지, 14(1), pp.45~55 (2018), (사)디지털산업정보학회[DOI]