Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -1 down vote favorite

Assume we can crash the RADIUS server in a VOIP system. What would be the impact on the confidentiality, integrity, and availability of VOIP service. What would be the impact if the same question if an attack occurred at a web server and a DHCP server?

share|improve this question

1 Answer

up vote 1 down vote accepted

This would depend on the how this is implemented (fail open versus fail closed).

But since RADIUS is used as an authentication service, I would say confidentiality and integrity wouldn't be affected (unless you have access to the RADIUS server when crashing the machine). The availability will obviously go down.

Just "crashing" the machines will not necessarily provide you access to the data in those services. If you do get access (root exploit using a buffer overflow that causes to crash the server) then you will indeed void confidentiality and integrity.

share|improve this answer
i want to know is it necessary to use an authentication in order to make communication between users (callers) in other words is it necessary that a user make an identification before calling – Mely Jun 24 '12 at 17:52
You do not need authentication, but what's the use of a line that provides integrity and confidentiality if you don't actually know who's using it? You would have a secure A to B line, but you would never be able to verify who's using it. – Lucas Kauffman Jun 24 '12 at 17:57
Moreover, given that the web server is used only for administration,I assume that any attack against it only affect the availability of VoIP. Is it right? – Mely Jun 24 '12 at 18:06
You should rephrase your question to provide a decent image of what your setup is and what you want to do. What does a webserver have to do with VOIP? What has a dhcp server have to do with VOIP? – Lucas Kauffman Jun 24 '12 at 18:52

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.