Cybersecurity in voice over IP (VoIP) systems : Protecting communication networks from threats, vulnerabilities, and cyber attacks

Tiwari, Ashish; Addimulam, Sushanth Chandra; Dubey, Nilesh; Kumar, K. Kiran; Kapila, Dhiraj; Jain, Kusumlata

doi:10.47974/JDMSC-2443

Open Access Research Article

Cybersecurity in voice over IP (VoIP) systems : Protecting communication networks from threats, vulnerabilities, and cyber attacks

Ashish Tiwarier.ashish.tiwari89@gmail.comBabu Banarsi Das Institute of Technology and Management Lucknow Campus Lucknow, Uttar Pradesh, 226028, IndiaView full profile → , Sushanth Chandra Addimulamsushanth93@gmail.comKforce Inc 2681 Sidney St Pittsburgh, PA 15203, U.S.A.View full profile → , Nilesh Dubeynileshdubey.ce@charusat.ac.inDepartment of Computer Science and Engineering Devang Patel Institute of Advance Technology and Research FTE, CHARUSAT UniversityAnand, Gujarat, 388421, IndiaView full profile → , K. Kiran Kumarkiran5434@kluniversity.inDepartment of Computer Science and Engineering Koneru Lakshmaiah Education FoundationDepartment of Computer Science and Engineering Koneru Lakshmaiah Education Foundation VaddeswaramGuntur District., Andhra Pradesh, 522502, IndiaView full profile → , Dhiraj Kapiladhiraj.23509@lpu.co.inDepartment of Computer Science & Engineering Lovely Professional UniversityDepartment of Computer Science & Engineering Lovely Professional UniversityPhagwara, Punjab, 144411, IndiaView full profile → , ^*Kusumlata JainCorresponding authorkusumlata.jain@jaipur.manipal.eduDepartment of Computer & Communication Engineering School of Computer Science and Engineering Manipal University Jaipur, Rajasthan, 303007, IndiaView full profile →

* Corresponding author · click or hover a name for details

pp. 2989–2999Vol. 28Issue 8December 2025DOI: 10.47974/JDMSC-2443 Crossmark XML

Received:: 05 Feb 2025
Published Online:: 08 Dec 2025
Article type:: Research Article
Language:: EN
Article no.:: JDMSC-2443
Pages:: 2989–2999

Abstract

Voice over Internet Protocol (VoIP) technology facilitates voice communication over IP networks, offering a more affordable and adaptable alternative to traditional phone systems. However, VoIP comes with substantial cybersecurity risks, including threats like eavesdropping, denial of service (DoS) attacks, man-in-the-middle attacks, spoofing, and fraud. As VoIP becomes increasingly prevalent in both personal and business contexts, securing these systems is paramount. This paper examines the vulnerabilities associated with VoIP, outlines common attack vectors, and discusses security strategies such as encryption, authentication protocols, firewalls, and intrusion detection systems aimed at mitigating these risks. The study concludes by offering recommendations for enhancing VoIP security through a combination of advanced technology and best practices.

Keywords

VoIP security Cybersecurity Communication networks Threat mitigation VoIP vulnerabilities Network security Encryption SIP security Denial-of-service (DoS) attacks Fraud prevention Secure VoIP protocols Authentication Intrusion detection Telecommunication security

Subject Classifications

Primary: 68M25Secondary: 94A6068P25

References

[1] R. Dantu and P. Kolan, “Detecting spam in VoIP networks,” in Proceedings of the Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI), pp. 31–37 (2005).
[2] D. Zhu and J. Zhang, “VoIP security: Problems and solutions,” in 2014 International Conference on Information Technology and Management Innovation (ICITMI), pp. 15–19 (2014).
[3] E. Y. Chen and D. Zhou, “Mitigating VoIP vulnerability to Denial of Service (DoS) attacks,” Security and Communication Networks, vol. 5, no. 12, pp. 1421–1432 (2012).
[4] S. Fahad and A. Hamza, “Machine learning approaches for spam detection in online social networks,” Artificial Intelligence Review, vol. 54, no. 5, pp. 3141–3174 (2021).
[5] Y. V. Rangaiah, A. K. Sharma, T. Bhargavi, M. Chopra, C. Mahapatra, and A. Tiwari, “A taxonomy towards blockchain-based multimedia content security,” in 2022 2nd International Conference on Innovative Sustainable Computational Technologies (CISCT), pp. 1–4, IEEE (Dec. 2022).
[6] N. K. Singh, A. Jain, S. Arya, W. E. G. Gonzales, J. E. A. Flores, and A. Tiwari, “Attack detection taxonomy system in cloud services,” in 2022 2nd International Conference on Innovative Sustainable Computational Technologies (CISCT), pp. 1–5, IEEE (Dec. 2022).
[7] A. Tiwari and R. Garg, “Reservation System for Cloud Computing Resources (RSCC): Immediate reservation of the computing mechanism,” International Journal of Cloud Applications and Computing (IJCAC), vol. 12, no. 1, pp. 1–22 (2022).
[8] A. Tiwari and R. M. Sharma, “Potent cloud services utilization with efficient revised rough set optimization service parameters,” in Proceedings of the International Conference on Advances in Information Communication Technology & Computing, pp. 1–7 (Aug. 2016).
[9] A. Tiwari and R. M. Sharma, “Realm towards service optimization in fog computing,” in Research Anthology on Architectures, Frameworks, and Integration Strategies for Distributed and Cloud Computing, IGI Global, pp. 1530–1563 (2021).
[10] H. Mehraj and M. S. Malik, “Text mining for spam detection: An overview,” Journal of Theoretical and Applied Information Technology, vol. 97, no. 11, pp. 3036–3044 (2019).
[11] N. Ishak and M. Haris, “Effective spam filtering using machine learning algorithms: A comparative study,” International Journal of Advanced Computer Science and Applications, vol. 11, no. 8, pp. 534–541 (2020).
[12] R. Kumar and A. Sahu, “A review of spam detection techniques: Challenges and future directions,” Journal of King Saud University - Computer and Information Sciences, vol. 34, no. 6, pp. 635–645 (2020).
[13] A. D. Clark, “VoIP security: Attacks and solutions,” International Journal of Computer Applications, vol. 45, no. 21, pp. 15–19 (May 2017).
[14] K. Chakraborty, S. Singhal, N. Arya, M. Tiwari, A. Khatoon, and A. Tiwari, “Multilevel cloud resource scheduling approach based on image-based signature system,” in Proceedings of the 5th International Conference on Information Management & Machine Intelligence (ICIMMI), pp. 1–7 (Nov. 2023).
[15] A. Tiwari and R. Garg, “Adaptive ontology-based IoT resource provisioning in computing systems,” International Journal on Semantic Web and Information Systems (IJSWIS), vol. 18, no. 1, pp. 1–18 (2022).
[16] D. Dudeja, S. M. Sabharwal, Y. Ganganwar, M. Singhal, N. Goyal, and A. Tiwari, “Sales-based models for resource management and scheduling in artificial intelligence systems,” Engineering Proceedings, vol. 59, no. 1, pp. 43 (2023).
[17] A. Tiwari and R. M. Sharma, “A skywatch on the challenging gradual progression of scheduling in cloud computing,” in Applications of Computing, Automation and Wireless Systems in Electrical Engineering: Proceedings of MARC 2018, Springer Singapore, pp. 531–541 (2019).
[18] R. Manikandan, R. K. Maurya, T. Rasheed, S. C. Bose, J. L. Arias-Gonzáles, U. Mamodiya, and A. Tiwari, “Adaptive cloud orchestration resource selection using rough set theory,” Journal of Interdisciplinary Mathematics, vol. 26, pp. 311–320 (2023).
[19] A. Tiwari and R. Garg, “ACCOS: A hybrid anomaly-aware cloud computing formulation-based ontology services in clouds,” in Proceedings of ISIC Conference, pp. 341–346 (2021).
[20] S. Kumar, S. Kumar, N. Ranjan, S. Tiwari, T. R. Kumar, D. Goyal, M. K. Rafsanjani, and others, “Digital watermarking-based cryptosystem for cloud resource provisioning,” International Journal of Cloud Applications and Computing (IJCAC), vol. 12, no. 1, pp. 1–20 (2022).
[21] S. Kumar, P. K. Srivastava, G. K. Srivastava, P. Singhal, D. Singh, and D. Goyal, “Chaos-based image encryption security in cloud computing,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 25, no. 4, pp. 1041–1051 (2022).
[22] S. Kumar, K. K. Dubey, A. K. Gautam, S. Verma, V. Kumar, and U. Mamodiya, “Detection of recurring vulnerabilities in computing services,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 25, no. 4, pp. 1063–1071 (2022).
[23] S. Kumar, P. K. Srivastava, A. K. Pal, V. P. Mishra, P. Singhal, G. K. Srivastava, and U. Mamodiya, “Protecting location privacy in cloud services,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 25, no. 4, pp. 1053–1062 (2022).
[24] M. Malik, M. Kumar, V. Kumar, A. K. Gautam, S. Verma, S. Kumar, and D. Goyal, “High-level browser security in cloud computing services from cross-site scripting attacks,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 25, no. 4, pp. 1073–1081 (2022).

Views: 216Downloads: 6Citations: 0