RTP: Audio and Video for the Internet

Chapter 13. Security Considerations

• Privacy

• Confidentiality

• Authentication

• Replay Protection

• Denial of Service

• Mixers and Translators

• Active Content

• Other Considerations

Until now we have considered an RTP implementation only in isolation. In the real world, however, there are those who seek to eavesdrop on sessions, impersonate legitimate users, and “hack into” systems for malicious purposes. A correctly implemented RTP system is secure against such attackers and can provide privacy, confidentiality, and authentication services to its users. This chapter describes the features of RTP that enhance user privacy, and outlines various potential attacks and how they may be prevented.

Privacy

The obvious privacy issue is how to prevent unauthorized third parties ...