In this paper we present the results of the experimental analysis of the transmission of voice over secure communication links implementing IPsec. Critical parameters characterizing the real-time transmission of voice over an IPsec-ured Internet connection, as well as techniques that could be adopted to overcome some of the limitations of VoIPsec (Voice over IPsec), are presented Our results show that the effective bandwidth can be reduced up to 50% with respect to VoIP in case of VoIPsec. Furthermore, we show that the cryptographic engine may hurt the performance of voice traffic because of the impossibility to schedule the access to it in order to prioritize traffic. We present an efficient solution for packet header compression, which we call cIPsec, for VoIPsec traffic. Simulation results show that the proposed compression scheme significantly reduces the overhead of packet headers, thus increasing the effective bandwidth used by the transmission. In particular, when cIPsec is adopted, the average packet size is only 2% bigger than in the plain case (VoIP), which makes VoIPsec and VoIP equivalent from the bandwidth usage point of view.
Voice over IPsec : analysis and solutions / R. Barbieri, D. Bruschi, E. Rosti - In: 18th Annual Computer Security Applications Conference : proceedings : 9-13 December, 2002, Las Vegas, NevadaLos Alamitos : IEEE Computer Society, 2002 Dec. - ISBN 0-7695-1828-1. - pp. 261-270 (( Intervento presentato al 18. convegno Annual Computer Security Applications Conference (ACSAC) tenutosi a Las Vegas nel 2002.
|Titolo:||Voice over IPsec : analysis and solutions|
BRUSCHI, DANILO MAURO (Secondo)
ROSTI, EMILIA (Ultimo)
|Parole Chiave:||Information Security, Internet Protocol, Voice over IP|
|Settore Scientifico Disciplinare:||Settore INF/01 - Informatica|
|Data di pubblicazione:||dic-2002|
|Digital Object Identifier (DOI):||http://dx.doi.org/10.1109/CSAC.2002.1176297|
|Tipologia:||Book Part (author)|
|Appare nelle tipologie:||03 - Contributo in volume|