| Module Description | ||
|
Module 01: Introduction to VoIP |
||
|
§ What is VoIP? § Why use IP for Voice? § VoIP-Convergence of Technologies § Basic VoIP Architecture § Need of a Layered Architecture § VoIP Layers |
§ TCP/IP Overview § Functions of TCP/IP Layers § VoIP Layers Vs. TCP/IP Layers § Public Switched Telephone Networking(PSTN) § Circuit Switching Vs. Packet Switching § Basic VoIP Features |
§ Benefits of VoIP § Building The ROI Model § Disadvantages of VoIP § Future of VoIP § Growth in VoIP Subscribers |
|
Module 02: Analog to Digital Conversions |
||
|
§ Source: § A to D Conversion § Types of ADC's § Sigma Delta ADC § Successive Approximation ADC § Pipelined ADC |
§ Flash ADC § Comparison of ADC's § Working of ADC's § Voice Compression § Encryption § Headers |
§ Destination § Sequencing § Decryption § Decompression § Digital to Analog Conversion |
|
Module 03: Traditional Voice Telephony Principles |
||
|
§ Analog Signaling § Types of Analog Signaling § Earth & Magnet (E&M) Signaling § Loop-Start § Ground-Start § Dial-Pulse Signaling § Dual Tone Multi-Frequency Signaling § Analog Systems |
§ Analog Network Components § Cabling § Basic Telephone System Operation § Plain Old Telephone Service (POTS) § Direct Inward Dialing (DID) § Digital Subscriber Line (DSL) § Digital § Passive Optical Network (PON) |
§ Dial Plans § Four-Wire Circuit § Time Division Multiplexing (TDM) § Call Control Signaling § Signaling System 7 (SS7) § Signaling Points § Signaling Links § SS7 Protocol Stack |
|
Module 04: VoIP Devices and Cisco Components |
||
|
§ Basic VoIP Equipments § VoIP Network Components § Analog Telephone Adaptor (ATA) § Media Gateway § Features of Media Gateway § Media Gateway Controller § Signaling Gateway § Call Manager § VoIP Switches § IP Phones |
§ Private Branch eXchange (PBX) § PSTN Gateway § Session Controller § Modems § VoIP Router · Cisco's VoIP Components § Types of VoIP Ports · Foreign Exchange Station (FXS) · Foreign Exchange Office (FXO) · Earth & Magnet (E&M) Interface |
§ VNM/VIC · VNM Models: NM-1V · VNM Models: NM-2V · VNM Models: NM-HDV High-Density VNM · VIC Models: VIC-2E/M · VIC-2FXS · VIC-2FXO · VWIC-2MFT-T1 § Two-Port ISDN BRI Card § Four-Port Analog DID/FXS VICs |
|
Module 05: Configuring VoIP |
||
|
§ Prerequisites for VoIP Configuration § § Port Numbering: 1700 Series § Port Numbering: Cisco 1760 § Port Numbering: 2600 and 3600 Series § Port Numbering: MC3810 Series § Port Numbering: 7200 Series § Port Numbering: AS5300 Series § Port Numbering: AS5x00 Series § Configuring Voice Ports §
Configuring FXO or § Configuring E&M Ports § Configuring to adjust Parameters of E&M Ports § Configuring DID Ports § Connection Command § Configuring Delay § Fine-Tuning FXS/FXO Ports § Fine-Tuning E&M Ports § Fine-Tuning DID Ports § Configuring POTS Dial Peers § Configuring Dial-Peer For VoIP § Configuring Dial-Peer For VoFR § Configuring Dial-Peer For VoATM § Configuring Trunking § Supervisory Disconnect § Configuring a Supervisory Disconnect Voice Class § Configuring ISDN BRI Voice Ports § Configuring ISDN PRI Voice Ports § Configuring ISDN PRI Voice Ports with Q.931 § Configuring QSIG |
§ Configuring T-CCS § Configuring H.323 Gateways § Configuring H.323 Gatekeepers § H.323 ID Addresses § Zone Prefixes § Gatekeeper Zone Prefix § Technology Prefixes § IP Precedence § RTP Priority § Traffic Shaping § Configuring cRTP § Enable cRTP on a Serial Interface § Enable cRTP with Frame Relay Encapsulation § Change the Number Of Header Compression Connections § Displaying Statistics § Configuring Custom Queuing § Enabling Custom Queuing · Applying Configuration to an Interface · Enabling Priority Queuing: Priority-List Command § Enabling Priority Queuing: Set Up Configuration · Configuring the Queue Limits § Applying Priority List to an Interface § Verifying Priority Queuing: Show Interface Command § Verifying Priority Queuing: Show Queuing Priority Command § Enabling Weighted Fair queuing § Verifying Weighted Fair Queuing: Show Interface Command § Verifying Weighted Fair Queuing: Show Queuing Command |
§ Configuring Class-Based Weighted Fair Queuing (CBWFQ) § Defining Class Maps § Creating Policies § Attaching Policies to Interfaces § Verifying CBWFQ: Show-Policy-Map Command § Verifying CBWFQ: Show-Policy-Map Interface Command § Configuring Packet Classification § IP Precedence § Verifying IP Precedence § Policy Routing § Verifying Policy Routing § Configuring RSVP § Verifying RSVP § Call Admission Control (CAC) § Verifying Call Admission Control § Configuring Priority Queuing with WFQ § Verifying Priority Queuing with WFQ § Configuring Traffic Shaping § Verifying Traffic Shaping § Configuring Congestion Avoidance with WRED § Verifying WRED § Configuring Link fragmentation and Interleaving § Verifying Link fragmentation and Interleaving § Configuring a Single-Router VoIP Network § Reviewing the Design § Configuring the Router: Step by Step § Testing and Verification |
|
Module 06: Implementation and Applications of VoIP |
||
|
§ VoIP Implementation Types § Phone to Phone Connection § Analog Telephone Adaptor (ATA) Setup § Phone to Phone Connection Using Gateway § Phone to Phone Connection Using Router § Computer to Computer Connection § Phone to Computer and Vice-Versa § IP-Enabled PBX (Private Branch Exchange) Method |
§ IP Centric LAN Method § Satellite VoIP § Software Support for VoIP § Applications of VoIP § What is Skype? § System Requirements § Getting Started with Skype § Skype is Safe § Features of Skype |
§ Skype for Windows § Skype for Mac OSX § Skype for LINUX § Skype for Business § Skype Web Toolbar § Skype Email Toolbar § Skype Office Toolbar § Skype for |
|
Module 07: Quality of Service (QoS) of VoIP |
||
|
§ Introduction to QoS § Quality of Experience (QoE) Vs. QoS § QoE for VoIP § Why is QoS needed in IP Transmission? § Why is QoS needed for VoIP Networks? § Factors Affecting Quality of Voice in VoIP |
§ QoS Monitoring § Passive Monitoring § Active Monitoring § QoS Protocols § RTP § RTCP |
§ RSVP § Multiprotocol Label Switching (MPLS) § Integrated Services (IntServ) § Differentiated Services (DiffServ) § IntServ Vs. DiffServ |
|
Module 08: H.323 Standards |
||
|
§ VoIP Standards § What is the need for VoIP Protocols? § Introduction to H.323 § Network Components of H.323 § Components of H.323 § H.323 Protocols Suite § H.323 Protocol Stack § Control and Signaling in H.323 § H.323 Advantages § Network Address Translation (NAT) § H.323 and NAT § H.225 § H.225/Q.931 Call Signaling § Q.931 Call Signaling Messages § H.225/Q.931 Signaling |
§ H.225 Registration, Admission, Status (RAS) § H.225/Q.931 RAS § Key RAS Messages § H.225 Protocol Structure § H.225 Security Considerations § H.235: Security and Encryption for H.323 § H.245 Call Control Messages § H.245 Call Control § H.245 Security Mechanism § H.261 (Video Stream for Transport Using the Real-Time Transport) § H.263 (Bitstream in the Real-Time Transport Protocol) § DVB (Digital Video Broadcasting) § H.450.1 |
§ H.450.2 § H.450.3 § H.450.4 § H.450.5 § H.450.6 § H.450.7 § H.450.8 § T.38 § T.120 § T.121 § T.122 § T.124 § T.125 § T.126 § T.127 |
|
Module 09: SIP and Supporting Protocols |
||
|
§ Session Initiation Protocol (SIP) § Components of SIP § SIP Messages § Headers for SIP Entities § SIP Functions § SIP: Supported Protocols § Understanding SIP's Architecture § Registering with a SIP Registrar § Requests through Proxy Servers § Requests through Redirect Servers |
§ Peer to Peer Architecture § Instant Messaging and SIMPLE § SIP security § H.323 Vs. SIP § Session Description Protocol (SDP) § SDP Specifications § Security Issues § Real-Time Transport Protocol (RTP) § Real-Time Transport Control Protocol (RTCP) § Real-Time Transport Streaming Protocol (RTSP) |
§ Simple Gateway Control Protocol (SGCP) § Session Announcement Protocol (SAP) § Skinny Client Control Protocol (SCCP) § Security Implications for Skinny § Dynamic Host Configuration Protocol (DHCP) § Trivial File Transfer Protocol (TFTP) § Hyper Text Transfer Protocol (HTTP) § Skype Protocol § Inter-Asterisk Exchange (IAX) § Simple Network Management Protocol (SNMP) |
|
Module 10: Megaco Protocol |
||
|
§ Media Gateway Control Protocol (MGCP) § History of Megaco (H.248) § Media Gateway Reference Architecture § MGCP Connections § Per-Call Requirements |
§ Megaco Vs. MGCP § Megaco Protocol Design § Megaco Commands § Megaco Messaging Sequence § Megaco Packages |
§ Megaco IP Phone Media Gateway § Role of Call Processing Language § Call Processing Language Characteristics § Protocol Security |
|
Module 11: Resource Reservation Protocol |
||
|
§ Resource Reservation Protocol (RSVP) § RSVP Setup § RSVP Message Structure § RSVP Message § RSVP Message Types |
§ RSVP Object Fields § RSVP Object Classes § RSVP Operation § RSVP Data Payload § RSVP Quality of Service |
§ RSVP Session Start-up § RSVP Reservation Style § RSVP Tunneling § RSVP Traffic Control Module § Security Implications |
|
Module 12: Wireless VoIP |
||
|
§ Voice Over WLAN (VoWLAN) § VoWLAN Call Routing § Characteristics of VoWLAN § Limitations of VoWLAN § Wireless VoIP § Wireless VoIP Deployment § Wireless VoIP Gateway: Motorola HH1620 DSL |
§ Advantages of Wireless VoIP § Limitations of Wireless VoIP § Standards and Protocols § Unlicensed § Wireless VoIP Gateway: AH1038 § Wireless VoIP Gateway: D-Link DVG-G1402S |
§ Wireless IP Phone § Wireless VoIP Phone: EZLoop § Wireless VoIP Phone: P-2000W_V2 § Wireless VoIP Phone: Shenzhen WP10W-S § Challenges to Build Successful Wireless VoIP Product § Attacks on Wireless VoIP |
|
Module 13: Encryption Techniques for VoIP |
||
|
§ Encryption § Why VoIP needs Encryption? § VoIP Encryption § How to Encrypt VoIP? § Pros & Cons of VoIP Encryption § Voice and Data Encryption Device (V/DED) § Speech Encryption |
§ Media Encryption § Wireless Encryption § IPSec and Role of IPSec in VoIP § Transport Mode § Tunnel Mode § Solutions to VoIPSec Issues § IETF Encryption Solutions for VoIP |
§ Suites from the IETF § S/MIME: Message Authentication § Transport Layer Security (TLS) § TLS: Key Exchange and Signaling Packet Security § Secure Real-Time Transport Protocol (SRTP) § SRTP: Voice/ Video Packet Security |
|
Module 14: Troubleshooting VoIP Network |
||
|
§ Issues of Network Slow Down § Troubleshooting Packet Loss § Troubleshooting Jitter § Troubleshooting Packetization Delay § Troubleshooting Bandwidth Problems § Troubleshooting Echo § Troubleshooting Voice Quality on Voice Ports § Troubleshooting Two-stage Dialing Failures § Troubleshooting Socket Failures § Troubleshooting Speech Recognition |
§ Troubleshooting Cabling § Troubleshooting Private Branch Exchange (PBX) Problems § Troubleshooting Central Office (CO) Problems § Troubleshooting Trunk Signaling § Troubleshooting Gateways and Gatekeepers § Troubleshooting Dial Peers § Troubleshooting Serial Interfaces § Troubleshooting Frame Relay |
§ Troubleshooting FXS and § Troubleshooting E&M Voice Ports § Troubleshooting Dial Plans § Basic VoIP Issues and Solutions § Troubleshooting RSVP § Troubleshooting MGCP § Troubleshooting RTP § Troubleshooting RTSP |
| Module 15: VoIP Testing and Tools | ||
|
§ Test Strategy § VoIP Network Component Testing § Gateway Testing § Gatekeeper Testing § IVR Testing § Billing and Prepaid Testing § NMS Testing § VoIP Test Suite § MediaPro: VoIP and Video Analyzer § 323Sim: H.323 Simulator § Vulnerability Assessment § Penetration and Vulnerability Testing § VoIP Security Tools § VoIP Sniffing Tools § Auth Tool § VoIPong § Vomit § PSIPDump § Netdude § Oreka § Wireshark § Web Interface for SIP Trace (WIST) § RTP Break |
§ VoIP Scanning and Enumeration Tools § SNScan § Netcat § Smap § SIPScan § SIPcrack § VoIPaudit § iWAR § SiVUS § SCTPscan § VoIP Packet Creation and Flooding Tools § Sipsak § SIPp § SIPNess Messenger § SIP Bomber § Spitter § Sip Send Fun § Scapy § VoIP Fuzzing Tools § Ohrwurm § Fuzzy Packet § SIP Forum Test Framework (SFTF) § Asteroid |
§ SIP-Proxy § VoIP Signaling Manipulation Tools § RTP Tools § Tcpdump § Windump § Ethereal (Wireshark) § Softperfect Network Sniffer § Http Sniffer § Ether Detect Packet Sniffer § Iris Network Traffic Analyzer § SmartSniff § NetResident Tool § VoIP Troubleshooting Tools § P.862 § P.563 § RTCP-RFC3550 § RTCP XR-RFC3611 § Packet Statistics § Test Tools § Traceroute § VQmon § Other VoIP Tools |
| Module 16: Threats to VoIP Communication Network | ||
|
§ VoIP is Prone to Numerous Threats § VoIP Vulnerabilities § Denial of Service (DOS) § DoS Attack Scenarios |
§ Eavesdropping § Packet Spoofing and Masquerading § Replay Attack § Call Redirection and Hijacking |
§ ARP Spoofing · ARP Spoofing Attack Scenarios § Service Interception § H.323-Specific Attacks § SIP Security Vulnerabilities |
| Module 17: VoIP Security | ||
|
§ Why VoIP Security? § Constituents of VoIP Security § VoIP Myths and Realities § Securing VoIP with DoS Attacks § Securing against Replay Attack § Securing ARP Caches against ARP Manipulation § Securing H.235 Protocol § Transport Layer Security (TLS) |
§ Skype Protocol Security § IAX Protocol Security § Security Implications for TFTP § Security Implications for HTTP § Security Implications for DHCP § Security Policies and Processes § Physical Security |
§ Human Safeguard Recommendations § Environmental Safeguard Recommendations § Network Intrusion Detection Systems § Host-Based Intrusion Detection Systems § Guidelines for Securing VoIP Network § Best-Practice Approaches for Minimizing common VoIP Network Risks |
| Module 18: Logical Segregation of Network Traffic | ||
|
§ Logical Separation of Data § Converged Network § Virtual LANs (VLANs) § VLAN Security § VLANs and Softphones § QoS and Traffic Shaping § NAT and IP Addressing § How does NAT Work? § Access Control Lists |
§ Firewalls § Deep packet Inspection (DPI) § NAT: Modes of Operation § NAT and Encryption § Authentication Header (AH) § AH: Transport and Tunnel Modes § Encapsulation Security Payload (ESP) § ESP Header: Transport Mode and Tunnel Mode |
§ Shallow packet Inspection § Stateful Inspection § Medium-Depth Packet Inspection § VoIP-Aware Firewalls Issues § H.323 Firewalls Issues § SIP Firewalls Issues § Bypassing Firewalls and NAT § Methods for Enabling SIP |
| Module 19: Hardware and Software VoIP Vendors | ||
|
§ Alcatel § Global Crossing § Avaya § Whaleback § Nortel § Norstar VoIP Gateway § Polycom |
§ Packet8 § Vonexus § Infotel § Net 4 § Dialexia § NGT § Qwest |
§ Pingtel § Cisco § 3Com § Vocalocity § Motorola § Nokia |
| Module 20: Regulatory Compliance of VoIP | ||
|
§ Regulatory Compliance § Sarbanes-Oxley Act (SOX) · Management Assessment of Internal Controls · SOX Compliance and Enforcement § Gramm-Leach-Bliley Act (GLBA) · Privacy Rule -Protection of Nonpublic Personal Information · Risk Management Guidelines for VoIP Systems
|
· Development and Implementation of Information Security § Health Insurance Portability and Accountability Act (HIPAA) · Security Standards for the Protection of PHI · Safeguards Standard for the Protection of PHI · Types of Safeguards · Administrative safeguards · Physical safeguards · Technical safeguards |
§ Communication Assistance for Law Enforcement ACT (CALEA) · Assistance Capability Requirements · Cooperation of Equipment Manufacturers and Providers of Telecommunications Support Services · Technical Requirements and Standards · Steps to Resolve CALEA § Enhanced 911 and Related Regulations · E911 Regulatory Basics § European · EU Regulatory Basics |
| Module 21: VoIP Hacking | ||
|
§ Types of VoIP Hacking § Stages of VoIP Hacking: § Foot printing § Scanning § Enumeration § Footprinting § Information Sources § Unearthing Information § Organizational Structure and Corporate Locations § Help Desk § Job Listings § Phone Numbers and Extensions § VoIP Vendors § Resumes § WHOIS and DNS Analysis § Steps to Perform Footprinting § Scanning § Objectives of Scanning § Host/Device Discovery § ICMP § ARP Pings § TCP § SNMP Sweeps § Port Scanning and Service Discovery |
§ TCP SYN Scan § UDP Scan § Host/Device Identification § What is Enumeration? § Steps to Perform Enumeration § Banner Grabbing with Netcat § SIP User/Extension Enumeration · REGISTER Username Enumeration · INVITE Username Enumeration · OPTIONS Username Enumeration · Automated OPTIONS Scanning with sipsak · Automated REGISTER, INVITE and OPTIONS Scanning with SIPSCAN against SIP server · Automated OPTIONS Scanning Using SIPSCAN against SIP Phones § Enumerating TFTP Servers § SNMP Enumeration § Enumerating VxWorks VoIP Devices § Steps to Exploit the Network § Does & DDoS Attacks § Flooding Attacks o DNS Cache Poisoning o Sniffing TFTP Configuration File Transfers
|
o Performing Number Harvesting and Call Pattern Tracking o Call Eavesdropping o Interception through VoIP Signaling Manipulation o Man-In-The-Middle (MITM) Attack o Application-Level Interception Techniques · How to Insert Rogue Application? · SIP Rogue Application · Listening to/Recording Calls · Replacing/Mixing Audio · Dropping Calls with a Rogue SIP Proxy · Randomly Redirect Calls with a Rogue SIP Proxy · Additional Attacks with a Rogue SIP Proxy § What is Fuzzing? · Why Fuzzing? · Commercial VoIP Fuzzing tools § Signaling and Media Manipulation · Registration Removal with erase registrations Tool · Registration Addition with add registrations Tool § VoIP Phishing § Covering Tracks |