A comparative analysis of the security aspects of the multimedia key exchange protocols

Authors:
John Floroiu;Dorgham Sisalem
Affiliations:
Tekelec, Germany, Berlin;Tekelec, Germany, Berlin
Venue:
Proceedings of the 3rd International Conference on Principles, Systems and Applications of IP Telecommunications
Year:
2009

Citing 0
Cited 4

Inter-domain and DoS-resistant call establishment protocol (IDDR-CEP): work in progress

Principles, Systems and Applications of IP Telecommunications
A secure and lightweight scheme for media keying in the session initiation protocol (SIP): work in progress

Principles, Systems and Applications of IP Telecommunications
Analysis of token and ticket based mechanisms for current VoIP security issues and enhancement proposal

CMS'10 Proceedings of the 11th IFIP TC 6/TC 11 international conference on Communications and Multimedia Security
Transaction-based authentication and key agreement protocol for inter-domain VoIP

Journal of Network and Computer Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

An IP-based multimedia communication system can be roughly divided into two planes: a signaling plane and a media plane. The signaling plane provides the necessary functions for setting up, controlling and terminating the multimedia sessions. The media plane provides the support for transporting the media content (audio, video, text or applications). Security mechanisms in the signaling planes address aspects related to user authentication, authorization or annonymization as well as the protection of the signaling messages against eavesdropping, interception and manipulation. The security aspects relevant to the media plane concern the encrypting of the media traffic as well as the efficient and secure exchange of the necessary keying material. This paper provides a comparative analysis of the security aspects of the most representative key exchange protocols designed for VoIP communication, namely DTLS, ZRTP, MIKEY and SDES. In this context, the key exchange protocols are described in relation to various authentication mechanisms and signaling plane security. Further, a number of possible attacks against these protocols are investigated and, where applicable, mitigation measures are proposed.