Real-time_Communications

Real-time Communications
This area recommends infrastructures for real-time communications with an emphasis on open standards, SIP in particular. The infrastructure itself should be media transparent, coping with voice, video, messaging, document sharing and presence. A particular focus is given to VoIP and IP telephony. Best practices from a number of NRENs in Europe are given. Security concerns are discussed and implemented solutions are recommended. Performance issues are also covered.


	IP Telephony Best Practice in EU National Research Networks IP telephony is offered as an advanced service by many NRENs in Europe. This document presents implemented solutions, experiences and recommendations from the Czech Republic, Finland, Croatia, Slovakia and Portugal. A later update to this report will include additional countries.
	IP Telephony Review from a Czech Academic Environment This document describes the best examples of VoIP implementations at Czech universities. Implementations based on the open-source solutions OpenSER/Kamailio and Asterisk are included. A commercial implementation, where Cisco Call Manager is used as an extension to the legacy PBX (Ericsson MD110), is also described. Description of a Kamailio configuration script generator is also included. Details from the implementation of the CESNET SIP infrastructure are given, which also includes the use of ENUM technology.
	Evaluating the Performance of a SIP Infrastructure A methodology for testing and benchmarking a SIP infrastructure is presented in this document. Tests are conducted based on a configurable maximum load. The results will reveal the dynamically changing characteristics of the tested system, such as response times and packet delays. This is useful information for deciding on a system that is best suited to a particular environment.
	SIP Penetration Testing in CESNET This document describes a system that generates SIP-penetration tests in order to reveal potential vulnerabilities for SIP servers, and shows example tests for a number of well-known attack methodologies. An analysis of the security risks is given and weaknesses are highlighted. The document also includes a description of applications that are used in evaluating of the security of the SIP infrastructure.
	VoIP Anomaly Detection Engine (VoIPADE) In this document, an open source solution, VoIPADE, which is based on a behavioural learning algorithm for anomaly detection of VoIP traffic, is detailed. The algorithm learns the normal behaviour of call patterns, and after an initial training period, the system will generate alarms based on configurable threshold values. VoIPADE can be installed in conjunction with session border controllers (SBCs), and analyse the logged call detail records (CDRs).