Sigurnost usluge tijekom objave i pokretanja sjednice

master's thesis

• Title (english): Security of service during session announcement and initiation
• Author: Josip Spajić
• Mentor: Dragan Jevtić (mentor)
• Committee member: Dragan Jevtić (predsjednik povjerenstva)
• Committee member: Krešimir Pripužić (član povjerenstva)
• Committee member: Marin Vuković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2017-07-19, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering

Abstract

SIP protokol u svojoj definiciji ne predviđa nikakve sigurnosne mehanizme. To ga čini jednim od najnesigurnijih protokola trenutno u upotrebi. Unatoč toj činjenici postao je praktički standard kada je riječ o uspostavi sjednica u paketskim mrežama.
Sigurnosni mehanizmi jesu dostupni i koriste se u svakodnevnoj upotrebi. Međutim potrebna je redefinicija samog protokola ako se želi riješiti temeljne probleme uzrokovane pogreškama prilikom definiranja protokola.
SIPp alat veoma je močan jednostavan i besplatan alat dostupan svima. Moguće ga je koristiti za utvrđivanje otpornosti mreže na velike količine prometa ili jednostavno kao alat za određivanje načina rada mreže. Kombiniran sa alatom wireshark pruža brojne mogučnosti za uvid u rad i način funkcioniranja mreže i mrežnih elemenata.

Abstract (english)

The SIP protocol in its definition does not predict any security mechanisms. This makes it one of the most insecure protocols currently in use. Despite this fact, it has practically become a standard when it comes to setting up sessions in packet networks. Safety mechanisms are available and used in everyday use. However, it is necessary to redefine the protocol itself to resolve the root causes of errors when defining the protocol.
SIPp Tool is a powerful, easy and free tool available to everyone. It can be used to determine network resistance to large volumes of traffic or simply as a tool for determining how a network works. Combined with the Wireshark Tool, there are numerous possibilities for insight into the operation of the network and network elements.

• Keywords: SIP; SIPp; Wireshark; 3CX; MD5; Message Digest Authentication; sigurnost sjednice; brute force napad
• Keywords (english): SIP; SIPp; Wireshark; 3CX; MD5; Message Digest Authentication; session security; brute force attack
• Language: croatian
• URN:NBN: urn:nbn:hr:168:348908
• Study programme: Title: Information and Communication Technology; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije (magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2019-03-14 00:52:00