Flooding

• Vulnerabilities:

• • Most hard-phones have limited or underpowered hardware
  • Protocols provide unauthenticated and unauthorized functions

• Attack:

• • Flood the device with VoIP protocol packets:
  • • SIP INVITE, OPTIONS
    • Bogus RTP media packets
  • Flood the device with network protocol packets:
  • • TCP SYN
    • ICMP

• Effect:

• • Degraded call quality
  • Device crash, halt, freeze, or respond poorly