Repository of DUTH

Cyber attack techniques on VoIP networks and countermeasures (Master thesis)

Κούτλας, Βασίλειος/ Koutlas, Vasileios/ Καινοτομία στην Τεχνολογία και Μάνατζμεντ Μηχανικών

This postgraduate dissertation is an investigation and presentation of cyber attack techniques that made their appearance after the massive spread of VoIP technology and its application in residential, corporate and service provider networks. Starting with a historical review of the evolution of telephone systems exploitation techniques of previously used technologies that eventually created the appearance of the first hackers and hacking techniques in history. Along the way, there follows a general presentation of VoIP technology including the various structural elements of VoIP networks, the different types of cyber attacks as they have evolved and the serious negative effects they can cause, based on statistics of VoIP cyberattacks. In addition to the theoretical approach, an important goal was also to approach the subject in a practical manner. With the creation of a properly equipped test lab, many of the attack techniques and methods used by VoIP hackers that were previously discovered in the theoretical part of our research, was possible to be tested. The structure of our lab environment and the presented attacks that where simulated, are covered with enough details, so that they can be used as a penetration testing guide for any reader who wants to utilize our research. The selection and the presentation order of the chosen attacks was developed in a scaled way so that they can be easily followed and understood by readers with a low cyber security experience. Aiming the prevention and the treatment of cyber attacks on VoIP networks, after the completion of the practical part, follows a presentation of a series of countermetters. The understanding of the methodology of VoIP hacking attacks as previously gained in the practical chapters that are directly referenced while highlighting best practices against them can create the ability to build the necessary security protection for the elements that compose a VoIP implementation