loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
18th Annual Computer Security Applications Conference (ACSAC '02)
Voice over IPsec: Analysis and Solutions
San Diego California
December 09-December 13
ISBN: 0-7695-1828-1
Roberto Barbieri, Universit? degli Studi di Milano
Danilo Bruschi, Universit? degli Studi di Milano
Emilia Rosti, Universit? degli Studi di Milano
In this paper we present the results of the experimental analysis of the transmission of voice over secure communication links implementing IPsec. Critical parameters characterizing the real-time transmission of voice over an IPsec-ured Internet connection, as well as techniques that could be adopted to overcome some of the limitations of VoIPsec (Voice over IPsec), are presented. Our results show that the effective bandwidth can be reduced up to 50% with respect to VoIP in case of VoIPsec. Furthermore, we show that the cryptographic engine may hurt the perfomance of voice traffic because of the impossibility to schedule the access to it in order to prioritize traffic.
We present an efficient solution for packet header compression, which we call cIPsec, for VoIPsec traffic. Simulation results show that the proposed compression scheme significantly reduces the overhead of packet headers, thus increasing the effective bandwidth used by the transmission. In particular, when cIPsec is adopted, the average packet size is only 2% bigger than in the plain case (VoIP), which makes VoIPsec and VoIP equivalent from the bandwidth usage point of view.
Citation:
Roberto Barbieri, Danilo Bruschi, Emilia Rosti, "Voice over IPsec: Analysis and Solutions," acsac, pp.261, 18th Annual Computer Security Applications Conference (ACSAC '02), 2002
Usage of this product signifies your acceptance of the Terms of Use.