Análisis de vulnerabilidades a nivel de capa de aplicación en la transmisión de VoIp en una intranet.

Abstract

The present study had as main objective to establish the main vulnerabilities in the application layer VoIP transmission, the behavior of the techniques that exploi t the vulnerabilities and possible solutions for improving safety. The methodology used in the study was a quasi - experimental type, since the variables were manipulated and subjected to observation and comparison processes on the same physical test scenar io, but with two logical configurations: A default configuration and other VoIP with the use of a VoIP security process. These tests were developed in the CISCO Academy at the Polytechnic University of Chimborazo. In conclusion, it was identified that the main vulnerability which has a VoIP network is affected Confidentiality 100%. When installing security certificates on the devices and the use of TLS on SIP is reduced to 16.75%. In second place, the authentication is located by 75% with a 17.75% decline . Then, the network availability is 100%. In the case of use of an IPS, is removed to a 58.25% and the Integrity factor is reduced to 8.38%. To avoid the studied security, it is recommended the use of a methodology based on VoIP security best practices wh ich is used by some companies engaged in the task of certification. In these companies, the main solutions are focused on SIP TLS using digital certificates that encrypt communication and the use of static ARP. This last method prevents spoofing for a MITM attack, a technique used in the present study.