Towards a security policy for VoIP applications

Recently voice over internet protocol (VoIP) technology is attracting more and more attention and interest in the industry. VoIP applications such as IP telephony systems involve sending voice transmissions as data packets over private or public IP networks as well as reassembled and decoded on the receiving side. Security concerns are always the major barrier that prevents many businesses from employing VoIP technologies. The IP telephony security is challenging as it involves many disciplines, from encryption to access control policies. In general, the engineering of a security policy starts with risk analysis and ends with a set of security assertions that is ready for integration into the security policy framework. In this paper, we discuss a security policy from the perspectives of communication and application security properties such as confidentiality, integrity and availability for constructing a security framework for VoIP applications