maybe some are not on that list
but interessted in that area
Roger
-------- Original-Nachricht --------
Dear VoIP enthusiasts and Community members,
We're writing in order to invite you all to participate in a research
open-source project, we've been working in since the beginning of this
year. This project is sponsored by the Science* and Technology Government
Department & Blas Pascal University, both organizations from Córdoba
province, Argentina.*
The link to the project: http://artemisa.sourceforge.net/ . Our work is
related to an open source honeypot, named Artemisa, for VoIP networks
deploying the SIP protocol. We'll really appreciate the participation of
anyone that has interest to play the *attacker's role*, if possible
concentrating in the VoIP service we are exposing. So as to let us capture
relevant information related with real attacks. As a result, we'll be able
to do an analysis of the efficiency of the platform. Furthermore, a
statistical analysis, of all the received attacks, will be performed.
*Target sip extensions:*
*1) **sip: <sip%3Aubp1@iptel.org>ubp1@iptel.org **or
**sip:<sip%3A229049@iptel.org>
229049@iptel.org** **(Public Free ext)*
*2)** **sip: <sip%3Aubp2@iptel.org>ubp2@iptel.org **or
**sip:<sip%3A229056@iptel.org>
229056@iptel.org** **(Public Free ext)*
*3)** **sip: <sip%3A2xxx@ubpsipserver.myvnc.com>2xxx@ubpsipserver.myvnc.com*
* **(SER)*
*4)** **sip: <sip%3Ametropolitan1@iptel.org>metropolitan1@iptel.org **or **
sip: <sip%3A229061@iptel.org>229061@iptel.org** **(Public Free ext)*
*5)** **sip: <sip%3Ametropolitan2@iptel.org>metropolitan2@iptel.org **or **
sip: <sip%3A229063@iptel.org>229063@iptel.org** **(Public Free ext)*
*6)** **sip: <sip%3A1xxx@asteriskserver.myvnc.com>
1xxx@asteriskserver.myvnc.com** **(Asterisk)*
*7)** **sip:2xxx@asteriskserver.myvnc.com:5061** **(SER)*
*8)** **sip: <sip%3A1xxx@asterisksipserver.myvnc.com>
1xxx@asterisksipserver.myvnc.com** **(Asterisk)*
We briefly give you a description of the honeypot:
Artemisa is a VoIP/SIP-specific honeypot software designed to connect
to a VoIP enterprise domain as a user-agent back-end in order to
detect malicious activity at an early stage. It registers mu tiple SIP
accounts, which do not represent real human subscribers, at one or
more VoIP service providers, and wait for incoming attacks. Besides,
Artemisa can play a role in the real-time adjustment of the security
policies of the enterprise domain where it is deployed (e.g. setting
rules in a firewall to ban IPs or in the VoIP PBX to ban caller-IDs).
Thanks for your time, hope you'll actively participate (attack!) the sip
extension presented above.
To contact us: artemisa.notifications@gmail.com
Best regards,
Exequiel Barrirero / Mauro Villarroel.-
_______________________________________________
Voipsec mailing list
Voipsec@voipsa.org
http://voipsa.org/mailman/listinfo/voipsec_voipsa.org