[VOIPSEC] FYI - Internet Draft submitted to IETF based on VOIPSA Threat Taxonomy

[dan_york at Mitel.com]

FYI, at the last IETF meeting, the folks in the SPEERMINT working group 
(on SIP peering) discussed the need to identify the threats to VoIP 
security, specifically with regard to SIP peering.  Savero Niccolini at 
NEC has now submitted an Internet Draft based off of the VOIPSA Threat 
Taxonomy for consideration.  Those of you who wish to comment on that 
document will do so.

(Also FYI, Jonathan Zar is in touch with the SPEERMINT working group 
leadership... so we are coordinating on this.  My expectation would be 
that any feedback on the I-D through the IETF process would probably also 
wind up back in the VOIPSA wiki.)

Regards,
Dan

-- 
Dan York, CISSP
Dir of IP Technology, Office of the CTO
Mitel Corp.     http://www.mitel.com
dan_york at mitel.com +1-613-592-2122
PGP key (F7E3C3B4) available for 
secure communication

----- Forwarded by Dan York/Kan/Mitel on 08/30/2006 04:07 PM -----


Internet-Drafts at ietf.org
08/30/2006 03:50 PM
Please respond to internet-drafts

 
        To:     i-d-announce at ietf.org
        cc: 
        Subject:        I-D ACTION:draft-niccolini-speermint-voipthreats-00.txt


A New Internet-Draft is available from the on-line Internet-Drafts 
directories.


                 Title                           : VoIP Security Threats
                 Author(s)               : S. Niccolini
                 Filename                : 
draft-niccolini-speermint-voipthreats-00.txt
                 Pages                           : 15
                 Date                            : 2006-8-30
 
This memo presents the different security threats related to VoIP.
First of all a taxonomy for the different types of security threats
is defined.  Afterwards the different instances of the threats are
briefly analyzed following such taxonomy.  Finally the existing
security solutions in SIP and RTP/RTCP are presented to describe the
countermeasures currently available for such threats.  The objective
of this document is to identify and enumerate the VoIP threat vectors
in order to specifiy security-related requirements specific to
peering.  Once the requirements are identified, methods and solutions
how to achieve such requirements can be selected.


A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-niccolini-speermint-voipthreats-00.txt

To remove yourself from the I-D Announcement list, send a message to 
i-d-announce-request at ietf.org with the word unsubscribe in the body of 
the message. 
You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce 
to change your subscription settings.

Internet-Drafts are also available by anonymous FTP. Login with the 
username "anonymous" and a password of your e-mail address. After 
logging in, type "cd internet-drafts" and then 
"get draft-niccolini-speermint-voipthreats-00.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

Internet-Drafts can also be obtained by e-mail.

Send a message to:
                 mailserv at ietf.org.
In the body type:
                 "FILE 
/internet-drafts/draft-niccolini-speermint-voipthreats-00.txt".
 
NOTE:            The mail server at ietf.org can return the document in
                 MIME-encoded form by using the "mpack" utility.  To use 
this
                 feature, insert the command "ENCODING mime" before the 
"FILE"
                 command.  To decode the response(s), you will need 
"munpack" or
                 a MIME-compliant mail reader.  Different MIME-compliant 
mail readers
                 exhibit different behavior, especially when dealing with
                 "multipart" MIME messages (i.e. documents which have been 
split
                 up into multiple messages), so check your local 
documentation on
                 how to manipulate these messages.

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.
ftp://anonymous@ftp.ietf.org/internet-drafts/draft-niccolini-speermint-voipthreats-00.txt_______________________________________________
I-D-Announce mailing list
I-D-Announce at ietf.org
https://www1.ietf.org/mailman/listinfo/i-d-announce