Authors:
Paolo Cennamo
1
;
Antonio Fresa
1
;
Anton Luca Robustelli
1
;
Francesco Toro
1
;
Maurizio Longo
2
and
Fabio Postiglione
2
Affiliations:
1
Co.Ri.TeL, Italy
;
2
Università degli Studi di Salerno, Italy
Keyword(s):
Beyond-3G networks, IP Multimedia Subsystem, Secure Real-Time Protocol, multimedia communications, voice quality.
Related
Ontology
Subjects/Areas/Topics:
Data and Systems Security
;
Information and Systems Security
;
Methodologies and Technologies
;
Mobile System Security
;
Network Security
;
Operational Research
;
Peer-To-Peer Security
;
Security
;
Ubiquitous Computing Security
Abstract:
The emerging all-IP mobile network infrastructures based on 3rd Generation IP Multimedia Subsystem philosophy are characterised by radio access technology independence and ubiquitous connectivity for mobile users. Currently, great focus is being devoted to security issues since most of the security threats presently affecting the public Internet domain, and the upcoming ones as well, are going to be suffered by mobile users in the years to come. While a great deal of research activity, together with standardisation efforts and experimentations, is carried out on mechanisms for signalling protection, very few integrated frameworks for real-time multimedia data protection have been proposed in a context of IP Multimedia Subsystem, and even fewer experimental results based on testbeds are available. In this paper, after a general overview of the security issues arising in an advanced IP Multimedia Subsystem scenario, a comprehensive infrastructure for real-time multimedia data protectio
n, based on the adoption of the Secure Real-Time Protocol, is proposed; then, the development of a testbed incorporating such functionalities, including mechanisms for key management and cryptographic context transfer, and allowing the setup of Secure Real-Time Protocol sessions is presented; finally, experimental results are provided together with quantitative assessments and comparisons of system performances for audio sessions with and without the adoption of the Secure Real-Time Protocol framework.
(More)