journal article·2023-09-26Open access

The Development of a Secure Internet Protocol (IP) Network Based on Asterisk Private Branch Exchange (PBX)

Mubarak Yakubova, Olga Manankova, Assel Mukasheva, Alimzhan Baikenov, Tansaule Serikov

Applied Sciences· Volume 13· Issue 19

Abstract

The research problem described in this article is related to the security of an IP network that is set up between two cities using hosting. The network is used for transmitting telephone traffic between servers located in Germany and the Netherlands. The concern is that with the increasing adoption of IP telephony worldwide, the network might be vulnerable to hacking and unauthorized access, posing a threat to the privacy and security of the transmitted information. This article proposes a solution to address the security concerns of the IP network. After conducting an experiment and establishing a connection between the two servers using the WireShark sniffer, a dump of real traffic between the servers was obtained. Upon analysis, a vulnerability in the network was identified, which could potentially be exploited by malicious actors. To enhance the security of the network, this article suggests the implementation of the Transport Layer Security (TLS) protocol. TLS is a cryptographic protocol that provides secure communication over a computer network, ensuring data confidentiality and integrity during transmission. Integrating TLS into the network infrastructure, will protect the telephone traffic and prevent unauthorized access and eavesdropping.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Internet Traffic Analysis and Secure E-voting · IPv6, Mobility, Handover, Networks, Security · Network Security and Intrusion Detection

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Information Technology, Almaty University of Power Engineering and Telecommunications Name after Gumarbek Daukeev, Almaty 050010, Kazakhstan

Department of Telecommunications and Space Engineering, Almaty University of Power Engineering and Telecommunications Name after Gumarbek Daukeev, Almaty 050010, Kazakhstan

School of Information Technology and Engineering, Kazakh-British Technical University, Almaty 050000, Kazakhstan

Electronics and Telecommunication Department, S. Seifullin Kazakh AgroTechnical Research University, Astana 010011, Kazakhstan

Funding

Science Committee of the Ministry of Science and Higher Education of the Republic of Kazakhstan

References (49)

Show source-provided references
1. Danylchenko, V.M., Mykolaychuk, V.R., Tkalenko, O.M., and Didkivskyy, A.S. (2020). Initial setup of PBX server based on Asterisk. Connectivity, 148.10.31673/2412-9070.2020.064448 ↗
2. PBX implementation in LAN using Asterisk open source software
3. Khan, B.M., Fahad, M., Bilal, R., and Khan, A.H. (2022). Performance Analysis of Raspberry Pi 3 IP PBX Based on Asterisk. Electronics, 11.10.3390/electronics11203313 ↗
4. Asterisk Open Source to Implement Voice over Internet Protocol
5. VoIP Implementation Using Asterisk PBX
6. Real-Time Implementation and Testing of VoIP Vocoders with Asterisk PBX Using Wireshark Packet Analyzer10.1142/S0219265921410309 ↗
7. A Diagnosis and Hardening Platform for an Asterisk VoIP PBX10.1155/2020/8853625 ↗
8. A proposal for a high availability architecture for VoIP telephone systems based on open source software
9. Enterprise network with software Asterisk PBX based on the PLC technology
10. Implementation of the Intelligent Voice System for Kazakh10.1088/1742-6596/495/1/012043 ↗
11. VoIP network covert channels to enhance privacy and information sharing10.1016/j.future.2020.04.032 ↗
12. An Enhanced Steganographic Code and Its Application in Voice-Over-IP Steganography10.1109/ACCESS.2019.2930133 ↗
13. Lomotey, R.K., and Deters, R. (July, January 27). Intrusion Prevention in Asterisk-Based Telephony System. Proceedings of the 2014 IEEE International Conference on Mobile Services, Anchorage, AK, USA.10.1109/MobServ.2014.25 ↗
14. VoIP QoS analysis over asterisk and Axon servers in LAN environment
15. VoIP Capacity Analysis in Full Duplex WLANs10.1109/TVT.2017.2729590 ↗
16. Performance Evaluation of BATMAN Routing Protocol for VoIP Services: A QoE Perspective10.1109/TWC.2014.2321576 ↗
17. Ali, S.R. (2018). Next Generation and Advanced Network Reliability Analysis: Using Markov Models and Software Reliability Engineering, Springer.10.1007/978-3-030-01647-0 ↗
18. Search for MC in modified networks10.1016/S0305-0548(00)00046-0 ↗
19. Pal, D., Triyason, T., and Vanijja, V. (2017, January 27–30). Asterisk server performance under stress test. Proceedings of the IEEE 17th International Conference on Communication Technology (ICCT), Chengdu, China.10.1109/ICCT.2017.8359973 ↗
20. Costa, L.R., Nunes, L.S.N., Bordim, J.L., and Nakan, K. (2015, January 25–29). Asterisk PBX Capacity Evaluation. Proceedings of the IEEE International Parallel and Distributed Processing Symposium Workshop, Hyderabad, India.10.1109/IPDPSW.2015.90 ↗
21. Rughinis, R.V., and Iconaru, C. (2008, January 28–30). A Practical Analysis of Asterisk SIP Server Performance. Proceedings of the 7th RoEduNet Internaional Conference, Cluj-Napoca, Romania.
22. Implementation of an IP Telephony System Based on Asterisk PBX
23. Implementing the VOIP Communication Principles Using Raspberry Pi as Server
24. VoIP: A comprehensive survey on a promising technology10.1016/j.comnet.2009.03.010 ↗
25. Konshin, S.V., Yakubova, M.Z., Nishanbayev, T.N., and Manankova, O.A. (2020, January 4–6). Research and development of an IP network model based on PBX asterisk on the opnet mod eler simulation package. Proceedings of the International Conference on Information Science and Communications Technologies, ICISCT 2020, Tashkent, Uzbekistan.10.1109/ICISCT50599.2020.9351405 ↗
26. Threats to Voice over IP communications systems
27. A scalable detection and prevention scheme for voice over internet protocol (VoIP) signaling attacks using handler with Bloom filter10.1002/nem.1995 ↗
28. Rehman, U.U., and Abbasi, A.G. (2015, January 13–15). Secure layered architecture for Session Initiation Protocol based on SIPSSO: Formally proved by Scyther. Proceedings of the 12th International Conference on Information Technology—New Generations (ITNG 2015), Las Vegas, NV, USA.10.1109/ITNG.2015.35 ↗
29. CAPTCHA-based DDoS defense system of call centers against zombie smart-phone
30. Barison, D., Miani, R.S., and De Souza Mendes, L. (2009, January 7–10). Evaluation of quality and security of a VoIP network based on asterisk and Open VPN. Proceedings of the International Conference on Security and Cryptography 2009, Milan, Italy.
31. Performance evaluation of VoIP systems in cloud computing
32. Wu, H., Zhu, C., and Cheng, G. (2022, January 25–28). Real-Time Application Identification of RTC Media Streams via Encrypted Traffic Analysis. Proceedings of the International Conference on Computer Communications and Networks (ICCCN 2022), Honolulu, HI, USA.10.1109/ICCCN54977.2022.9868928 ↗
33. Shen, C., Nahum, E., and Schulzrinne, H. (2010, January 2–3). The impact of TLS on SIP server performance. Proceedings of the IPTComm 2010—Principles, Systems and Applications of IP Telecommunications 2010, Munich, Germany.10.1145/1941530.1941540 ↗
34. Implementation of RFC 5359 SIP (VoIP) services on asterisk PBX
35. Kulin, M., Kazaz, T., and Mrdovic, S. (2012, January 25–27). SIP server security with TLS: Relative performance evaluation. Proceedings of the 9th International Symposium on Telecommunications, BIHTEL 2012—Proceedings, Sarajevo, Bosnia and Herzegovina.10.1109/BIHTEL.2012.6412062 ↗
36. Lara-Cueva, R.A., Pazmino, S., and Acosta, F. (2022, January 22–25). Performance evaluation of an Asterisk PBX prototype Beaglebone Black based. Proceedings of the 17th Iberian Conference on Information Systems and Technologies—CISTI 2022, Madrid, Spain.10.23919/CISTI54924.2022.9820514 ↗
37. Asif, K., Eshtiak, A., Sami, A., Bharanidharana, S., and Pronab, G. (2022). Mobile Computing and Sustainable Informatics, Springer.
38. Analysis and research of the security of a wireless telecommunications network based on the IP PBX Asterisk in an Opnet environment
39. Serikov, T.G., Yakubova, M.Z., Mekhtiev, A.D., Yugay, V.V., Muratova, A.K., Razinkin, V.P., Okhorzina, A.V., Yurchenko, A.V., and Alkina, A.D. (2016, January 1–3). The analysis and modeling of efficiency of the developed telecommunication networks on the basis of IP PBX asterisk now. Proceedings of the 11th International Forum on Strategic Technology, IFOST 2016, Novosibirsk, Russia.10.1109/IFOST.2016.7884168 ↗
40. Traffic Dataset and Dynamic Routing Algorithm in Traffic Simulation
41. Scope of machine learning applications for addressing the challenges in next-generation wireless networks10.1049/cit2.12114 ↗
42. Softwarization and virtualization of VoIP networks10.1007/s11227-022-04448-w ↗
43. Dong, F., Deng, B., Yu, H., Xie, W., Xu, H., and Gu, Z. (2022, January 11–13). An Asterisk-shaped Patch Attack for Object Detection. Proceedings of the 7th IEEE International Conference on Data Science in Cyberspace, DSC 2022, Guilin, China.10.1109/DSC55868.2022.00024 ↗
44. Surasak, T., and Scott, H.C.-H. (2019, January 18–21). Enhancing VoIP Security and Efficiency Using VPN. Proceedings of the International Conference on Computing, Networking and Communications, ICNC 2019, Honolulu, HI, USA.10.1109/ICCNC.2019.8685553 ↗
45. Network anomaly detection using deep learning techniques10.1049/cit2.12078 ↗
46. Romanets, I., Sachenko, A., and Dubchak, L. (2018, January 28–30). Method of Protection against Traffic Termination in VoIP. Proceedings of the 10th International Conference on Electronics, Computers and Artificial Intelligence, ECAI 2018, Iasi, Romania.10.1109/ECAI.2018.8678992 ↗
47. Novel Approach for IP-PBX Denial of Service Intrusion Detection Using Support Vector Machine Algorithm
48. Digital Image Correlation Measurement of the Deformation and Failure in PBX Brazilian Discs Reinforced with CFRP Patches10.1002/prep.202000153 ↗
49. McInnes, N., and Wills, G. (2021, January 23–25). The VoIP PBX Honeypot Advance Persistent Threat Analysis. Proceedings of the International Conference on Internet of Things, Big Data and Security, IoTBDS—2021, Online Streaming.10.5220/0010443500700080 ↗