[VOIPSEC] RTP-borne virus examples?

[dhiraj.2.bhuyan at bt.com]

Securing the media stream (using IPSec for example) will solve many such
issues. But in my opinion, there seems to be not much interest in
securing the media stream at this moment. I might be wrong (hopefully!).

--
Dhiraj Bhuyan, CISSP
Senior Network Security Researcher,
pp2A, Rigel House, BT Group CTO
Martlesham Heath, Ipswich, IP5 3RE

-----Original Message-----
From: Voipsec-bounces at voipsa.org [mailto:Voipsec-bounces at voipsa.org] On
Behalf Of Martyn Davies
Sent: 02 December 2005 15:38
To: Voipsec at voipsa.org
Subject: [VOIPSEC] RTP-borne virus examples?


I'm with Scott Berkman on this.  I can imagine that you could malform an
RTP packet to crash a phone (or gateway).   But to break the code in
such a way that the payload ends up being executed as code?  These
opportunities will be far and few between.  It seems to me also that
because RTP packets travel unreliably (on UDP), this would be an
inefficient way to deliver a virus, since the packet could get lost
along the way and never even reach destination.

Regards, Martyn

------------------------------------------------------------------------
----------------------------------------
Martyn Davies
Principal Consultant

Eicon Networks
Kings Chase
107-123 King Street
Maidenhead
Berkshire
SL6 1DP

Tel:       01628 641 770
Direct:  01628 641 790 x 210
Fax:      01628 641 780
Mobile:  07881 908 381


_______________________________________________
Voipsec mailing list
Voipsec at voipsa.org
http://voipsa.org/mailman/listinfo/voipsec_voipsa.org