IP Telephony Review from a Czech Academic Environment This document describes the best examples of VoIP implementations at Czech universities. Implementations based on the open-source solutions OpenSER/Kamailio and Asterisk are included. A commercial implementation, where Cisco Call Manager is used as an extension to the legacy PBX (Ericsson MD110), is also described. Description of a Kamailio configuration script generator is also included. Details from the implementation of the CESNET SIP infrastructure are given, which also includes the use of ENUM technology.
SIP Penetration Testing in CESNET This document describes a system that generates SIP-penetration tests in order to reveal potential vulnerabilities for SIP servers, and shows example tests for a number of well-known attack methodologies. An analysis of the security risks is given and weaknesses are highlighted. The document also includes a description of applications that are used in evaluating of the security of the SIP infrastructure.