Seguridad en redes voip: simulación, evaluación de amenazas y propuesta de contramedidas

Abstract

The purpose of this project is to implement security measures in LAN infrastructures that use VoIP, by simulating attack scenarios to detect vulnerabilities and ensure the confidentiality of communications. The initial research analyzes the VoIP protocol and its potential vulnerabilities, using scientific articles and reliable academic sources. Tools such as GNS3, VMware and Kali Linux are selected to configure VoIP network environments and simulate realistic security tests. The implementation of the simulated environment allows evaluating the effectiveness of security controls such as Port-Security, ACL and Port-Mirror. Attacks such as ARP Spoofing, DDoS and Eavesdropping are simulated to identify vulnerabilities and evaluate their impact on the confidentiality of VoIP communications. Quantitative results show that Port-Security blocks 90% of unauthorized MAC addresses and prevents ARP table changes with 95% effectiveness. ACLs block 98% of attack packets and reduce bandwidth usage by 50%. Port-Mirror detects 75% of suspicious activity and correctly analyzes 85% of captured packets. It is recommended to maintain a proactive and adaptive approach, including continuous monitoring and evaluation of security controls. In addition, it is suggested to investigate new security vulnerabilities and protocols, adopt new simulation tools, develop standard protocols for security testing and perform regular audits. The study confirms that the implementation of security controls in LAN infrastructures using VoIP guarantees the privacy of communications. The effectiveness measured in terms of blocking attacks and monitoring suspicious traffic supports this conclusion, demonstrating that security measures are crucial for the protection of VoIP communications in a constantly evolving technological environment.