A hands-on course covering SIP security. It is assumed that delegates already know SIP as this course focuses purely on the security issues in SIP IP telephony networks. Hands-on practicals follow each major theory session and include use of various SIP security tools such as vomit, sipp, sipsak and sivus amongst others.
There are no formal prerequisite courses, just a good knowledge of how SIP works.
A good suggested course would be Definitive SIP for Engineers
By the end of the course delegates will be able to:
SIP review
SIP infrastructure and entities, example SIP session.
Hands on Simple SIP network with and without authentication.
SIP security attacks
DOS attacks, infrastructure attacks, eavesdropping, spoofing, replay, message integrity.
Hands on Basic SIP packet capture, infrastructure attacks.
SIP tools
SIP packet creation: Sivus, SIPsak, PROTOS, SFTF, SIP bomber, SIPp, Seagull, Nastysip. SIP packet generators: SIPNess, NetDude. Monitoring: Wireshark, Cain & Abel, Vomit, Oreka, VoiPong. Scripts and tools: SIP-Fun, Skora.net, kphone-ddos, sip-scan, sip-kill, sip-redirectrtp. Health of different tools.
Hands on Generating SIP packets, rebuilding conversations from captured packets, password cracking.
VPNs and SIP
IPSec, AH, ESP, transport mode, tunnel mode, Pre Shared Keys, Public keys.
Hands on SIP calls over IPSec.
Secure SIP signaling
SIP relationship with HTTP, Deprecated HTTP 1.0 basic authentication, HTTP 1.1 Digest authentication, S/MIME, SIPS, SIPS URI, TLS, DTLS, PKI infrastructures.
Hands on SIP with TLS.
Secure media streams
SRTP, features, packet format, default encryption, default authentication, key distribution. S/MIME, MIKEY, SDP security descriptions. SIP security agreements.
Hands on Analysing SRTP packets.
Firewalls
NAT traversal. Impact of firewall on infrastructure attacks. TLS and firewalls. SIP specific firewalls.
Hands on SIP calls through a firewall.
Experience SIP security for engineers in Kazakhstan through Bilginç IT Academy's live and interactive virtual classroom environment. Join a Public course as an individual delegate or arrange a dedicated Private / In-house online training program exclusively for your organization.
Experience SIP security for engineers through face-to-face Classroom Based training in Kazakhstan. Training can be delivered as a Public course open to individual delegates or as a dedicated Private / In-house class for your organization.
Arrange SIP security for engineers in Kazakhstan as a dedicated Onsite training program for your organization. Bilginç IT Academy trainers can deliver the training at your office or another location of your choice, with the program planned around your team's requirements and business objectives.
Join our public live virtual trainings remotely from Kazakhstan. Private group trainings can also be organized at your preferred location in Kazakhstan, around your schedule.
Kazakhstan stands as the preeminent technological and financial powerhouse of Central Asia, with the dynamic cities of Almaty and Astana serving as global magnets for innovation. The country is home to the Astana Hub, an international tech startup center, and Nazarbayev University, both of which are at the forefront of pioneering research in Artificial Intelligence, Blockchain, and Big Data analytics. Kazakhstan has achieved worldwide recognition for its advancements in digital mining and financial technologies, supported by a national strategy that prioritizes high-quality IT education and continuous professional development. Our comprehensive training programs are strategically designed to empower professionals in Kazakhstan to master complex corporate systems and lead large-scale digital innovation processes. By bridging the gap between local talent and global industry standards, we ensure that the Kazakh workforce remains highly competitive in the rapidly evolving Eurasian digital economy.
