prikaz prve stranice dokumenta Provjera identiteta tijekom dopunske usluge SIP sjednice
No public access
master's thesis
Provjera identiteta tijekom dopunske usluge SIP sjednice
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2017. urn:nbn:hr:168:443071
Mandić, Ivan
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Mandić, I. (2017). Provjera identiteta tijekom dopunske usluge SIP sjednice (Master's thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:443071

Mandić, Ivan. "Provjera identiteta tijekom dopunske usluge SIP sjednice." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2017. https://urn.nsk.hr/urn:nbn:hr:168:443071

Mandić, Ivan. "Provjera identiteta tijekom dopunske usluge SIP sjednice." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2017. https://urn.nsk.hr/urn:nbn:hr:168:443071

Mandić, I. (2017). 'Provjera identiteta tijekom dopunske usluge SIP sjednice', Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 03 July 2024, https://urn.nsk.hr/urn:nbn:hr:168:443071

Mandić I. Provjera identiteta tijekom dopunske usluge SIP sjednice [Master's thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2017 [cited 2024 July 03] Available at: https://urn.nsk.hr/urn:nbn:hr:168:443071

I. Mandić, "Provjera identiteta tijekom dopunske usluge SIP sjednice", Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2017. Available at: https://urn.nsk.hr/urn:nbn:hr:168:443071

Metadata
TitleProvjera identiteta tijekom dopunske usluge SIP sjednice
Title (english)Authentication during additional service of a SIP session
AuthorIvan Mandić
MentorDragan Jevtić (mentor)
Committee memberDragan Jevtić (predsjednik povjerenstva)
Committee memberKrešimir Pripužić (član povjerenstva)
Committee memberMarin Vuković (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2017-09-12, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Electrical Engineering
Abstract
Signalizacijski protokol SIP danas je postao standard za uspostavljanje i kontrolu sjednice unatoč svojim brojnim sigurnosnim propustima i nedostatcima. Iako postoje neki sigurnosni mehanizmi, protokol sam po sebi zbog toga što je baziran na tekstualnom obliku je vanjskom napadaču lako čitljiv. Koristeći alat za snimanje prometa Wireshark pokazali smo razmjenu SIP poruka i njihove sigurnosne nedostatke, kao i neke metode koje smo koristili prilikom simulacije željenih scenarija, poput REGISTER, INVITE, REFER, NOTIFY, BYE itd. Pomoću alata SIPp koji je besplatan alat za generiranje SIP poruka smo analizirali i pokazali osnovne scenarije uspostave poziva i registracije prilikom uspostave poziva. Scenarij prebacivanja poziva simulirali smo u programu za uspostavljanje SIP sjednica 3CX koji nam omogućava postavljanje 3CX poslužitelja i 3CX klijenta. Tu smo snimanjem alatom Wireshark također uvidjeli identične sigurnosne propuste kao sa slanjem poruka pomoću SIPp alata.
Abstract (english)
SIP signalization protocol has become standard for todays as session initiation and control application despite its security flaws and loops. Although there are some security mechanisms, the procotol by itself, because its text based, is easily read to an outside attacker. Using Wireshark, the tool for traffic analisis we shown the communication and exchange of SIP messages and there are security flaws, also we have shown some methods we used to simulate needed scenarios, like REGISTER, INVITE, REFER, NOTIFY, BYE etc. Using the SIPp, a free tool for the generation of SIP messages we analyzed some basic scenarios like call initiation and user registration during call intiation. The scenario of call transfer we simulated using 3CX the tool for initiating SIP sessions which allowed us to set up a 3CX poslužitelj and 3CX clients. Its where we also noticed security flaw by analyzing recorded traffic in Wireshark.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:443071
Study programmeTitle: Information and Communication Technology
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije (magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2019-03-13 22:35:41