SIP[4] will be a part of future IP telephony infrastructure, raising new security concerns and issues. As past experience has shown, a majority of these problems are due to software vulnerabilities. One class of software vulnerabilities is introduced during implementation, in the coding process, due to non-robust handling of input data. An example listing of vulnerability types and failures is in Table 1.

One way to counter these vulnerabilities is to do white box testing and to perform code audits. This white paper discusses this process.