Sjur Usken

Views on new technologies and business opportunities from Sjur Usken

Monthly Archives: March 2011

Detecting phrases in an encrypted VoIP call

Even if you use an encrypted VoIP connection, the content of your call can be picked up by analyzing the timing and size of the encrypted traffic. You must use a Variable Bit Rate (VBR) codec, which just compresses the speech which is said. If you would use encryption on G711 with no Voice Activation Detection (VAD) enabled (just a continous stream of data), this phrase recognition would not be possible.

This shows that it you need to see the “whole” picture when securing your communication.

The full paper is here for more information.

Also a 27 pages presentation here

GSoC project -> Dionea with SIP

Are you a student in need of a summer job and interested in VoIP?

Apply to become a Google Summer of Code student and help the Honeynet Project to improve the SIP module for Dionea!

Join the IRC channel on freenode for any questions on channel #gsoc-honeynet (web client available here)