Sipera LAVA Tool: VoIP Vulnerability Analysis

Designed specifically for VoIP and unified communications security, the Sipera LAVA (Load Analysis and Vulnerability Assessment) Tool is capable of launching threat centric attacks from any access point in the network and emulates thousands of attacks – from floods, distributed floods and stealth to session anomalies and spam. Continuously updated with the latest Vulnerability database, the Sipera LAVA Tool can generate attack traffic as well as good traffic at the same time to truly verify the networks’ readiness to resist VoIP-related attacks. The tool further enables enterprises and service providers to evaluate new systems and software updates for known and previously undetected security in a variety of deployments. These tools are used by the Sipera VIPER Services team as part of their analysis to ensure a decrease in VoIP security events in production networks.

Features

Sipera LAVA Emulation

Single or multiple Client(s) , Server(s)
Different types of attacks

Flood attacks
Distributed flood attacks
Stealth attacks
Protocol Fuzzing
Reconnaissance

Session Anomalies
Media Anomalies
Spam

Good traffic load generation

Sipera LAVA Taxonomy

Reconnaissance

Resource Enumeration

Call-Walking

Message Fuzzing
Request Flooding

DoS/Distributed DoS

Endpoint and Server

Replay Message Dump

Session Anomalies

Source IP Spoofing
Application level information spoofing
Call hijack
Registration hijack
Media hijack
Malicious Call Tear-down

Sipera LAVA Technology

Scripting capability for creating attack scenarios
GUI interface for ease of configuration
All SIP/UMA/IMS protocols
IPSec/IKEv2, TCP, UDP, TLS
SIM card reader and virtual SIM support
Pre-shared key support
Statistics and reporting capability
Runs on a Linux OS as well as MS Windows XP

For more information on VoIP vulnerability analysis and security solutions from Sipera, see the Sipera VoIP Security demo.

UC Security Defined
Sipera Systems, the leader in real-time Unified Communications (UC) security, is the choice of enterprises and service providers around the world to support their mission-critical UC deployments.
Sipera offers groundbreaking, production-proven solutions that secure voice, video, messaging, collaboration, and other real-time communications in converged IP networks, boosting compliance with information security requirements.
Backed by the industry-leading research of the VIPER lab, Sipera's solutions provide comprehensive threat protection, policy enforcement, access control, and encryption in a single flexible appliance.