Session PEERing for Multimedia INTerconnect (SPEERMINT) Security Threats and Suggested Countermeasures
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 22
- Abstract
- The Session PEERing for Multimedia INTerconnect (SPEERMINT) working group (WG) provides a peering framework that leverages the building blocks of existing IETF-defined protocols such as SIP and ENUM for the interconnection between SIP Service Providers (SSPs). The objective of this document is to identify and enumerate SPEERMINT- specific threat vectors and to give guidance for implementers on selecting appropriate countermeasures. Security requirements for SPEERMINT that have been derived from the threats detailed in this document can be found in RFC 6271; this document provides concrete countermeasures to meet those SPEERMINT security requirements. In this document, the different security threats related to SPEERMINT are classified into threats to the Lookup Function (LUF), the Location Routing Function (LRF), the Signaling Function (SF), and the Media Function (MF) of a specific SIP Service Provider. Various instances of the threats are briefly introduced inside the classification. Finally, existing security solutions for SIP and RTP/RTCP (Real-time Transport Control Protocol) are presented to describe countermeasures currently available for such threats. Each SSP may have connections to one or more remote SSPs through peering or transit contracts. A potentially compromised remote SSP that attacks other SSPs is out of the scope of this document; this document focuses on attacks on an SSP from outside the trust domain such an SSP may have with other SSPs. This document is not an Internet Standards Track specification; it is published for informational purposes.
- Publication Date
- 2011-11-01
- Status Note
- Informational
- DOI
10.17487/RFC6404- Link
- https://doi.org/10.17487/RFC6404
- Author(s)
- Jan SeedorfSaverio NiccoliniEric ChenHendrik Scholz
- Keyword(s)
- VoIP, Security Threats, Multimedia, Threat Countermeasures, SIP Peering, Fraud Prevention, Network Protection, SIP, RTP, RTCP, Control Plane, User Plane
Latest version of IETF RFC 6404
Document Versions — IETF RFC 6404
-
▶ IETF RFC 6404 (2011-11-01)THIS DOC [ACTIVE] [LATEST VERSION]
Bibliographic Reference(s)
- Zar, J. and et al, "VOIPSA VoIP Security and Privacy Threat Taxonomy, Public Release 1.0", http://www.voipsa.org/Activities/taxonomy.php , October 2005. EXTERNAL
- Wieser, C., Laakso, M., and H. Schulzrinne, "SIP Robustness Testing for Large-Scale Use", First International Workshop on Software Quality (SOQUA 2004), September 2004. EXTERNAL
- Mule, J., Cartwright, K., Ali, S., and A. Mayrhofer, "Session Peering Provisioning Protocol", Work in Progress, September 2011. EXTERNAL
- Gertz, M. and S. Jajodia, "Handbook of Database Security: Applications and Trends", Springer, 2008. EXTERNAL
- IETF RFC 2827 [Active*]
- IETF RFC 3261 [Active*]
- IETF RFC 3323 [Active*]
- IETF RFC 3324 [Active*]
- IETF RFC 3325 [Active*]
- IETF RFC 3711 [Active*]
- IETF RFC 3893 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4034 [Active*]
- IETF RFC 4035 [Active*]
- IETF RFC 4301 [Active, Amended*]
- IETF RFC 4347 [Superseded*]
- IETF RFC 4474 [Superseded*]
- IETF RFC 4475 [Active*]
- IETF RFC 4568 [Active*]
- IETF RFC 4732 [Active*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5351 [Active*]
- IETF RFC 5352 [Active*]
- IETF RFC 5353 [Active*]
- IETF RFC 5486 [Active*]
- IETF RFC 5853 [Active*]
- IETF RFC 6271 [Active*]
- IETF RFC 6406 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC6404.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 6404, Session PEERing for Multimedia INTerconnect (SPEERMINT) Security Threats and Suggested Countermeasures. Available at https://doi.org/10.17487/RFC6404
Snippet:
IETF RFC 6404, Session PEERing for Multimedia INTerconnect (SPEERMINT) Security Threats and Suggested Countermeasures. Available at https://doi.org/10.17487/RFC6404
HTML (ISO 690 compliant)
Preview:
IETF RFC 6404, Session PEERing for Multimedia INTerconnect (SPEERMINT) Security Threats and Suggested Countermeasures. Available at https://doi.org/10.17487/RFC6404
Snippet:
<span class="citation"><cite>IETF RFC 6404</cite>, Session PEERing for Multimedia INTerconnect (SPEERMINT) Security Threats and Suggested Countermeasures. Available at <a href="https://doi.org/10.17487/RFC6404" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6404</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 6404, Session PEERing for Multimedia INTerconnect (SPEERMINT) Security Threats and Suggested Countermeasures
doi: 10.17487/RFC6404
url: https://doi.org/10.17487/RFC6404
doi: 10.17487/RFC6404
url: https://doi.org/10.17487/RFC6404
Snippet:
<li> <cite id="bib-rfc6404">IETF RFC 6404</cite>, Session PEERing for Multimedia INTerconnect (SPEERMINT) Security Threats and Suggested Countermeasures <span class="doi">10.17487/RFC6404</span> </li>
Referenced By
- IETF RFC 6405 [Active*]
- IETF RFC 6406 [Active*]