ul
Phyllis Sterlin
Sippts is a suite of tools to audit VoIP servers and devices using SIP protocols. Sippts is programmed in Perl script and it consists of:
+ Sipscan : Fast scanner for SIP services that uses multithread. Sipscan can check IP and port ranges and works over UDP or TCP.
+ Sipexten : Identifies extensions on a SIP server. Sipexten uses multithread and can check IP and port ranges.
+ Sipcrack : Remote password cracker. Sipcrack uses multithread and can test passwords for several users in IP and port ranges.
+ Sipinvite : Check if a server allow us to make calls without authentication. If the SIP server has a bad configuration, it will allows us to make calls to external numbers. Also it can allow us to transfer the call to a second external number.
+ Sipsniff : Simple sniffer for SIP protocols that allows us to filter by SIP method type.
Abstract:Voice over Internet Protocol (VoIP) and its underlying Session Initiation Protocol (SIP) are widely deployed technologies since they provide an efficient and fast means of both voice and data communication over a single network. However, in spite of their advantages, they also have their security threats due to the inherent vulnerabilities in the underlying Internet Protocol (IP) that can potentially be exploited by hackers. This study introduces a novel defense mechanism to effectively combat advanced attacks that exploit vulnerabilities identified in some less-known features of SIP. The SIP-DRDoS (SIP-based distributed reflection denial of service) attack, which can survive the existing security systems, is an advanced attack that can be performed on an SIP network through the multiplication of legitimate traffic. In this study, we propose a novel defense mechanism that consists of statistics, inspection, and action modules to mitigate the SIP-DRDoS attack. We implement the SIP-DRDoS attack by utilizing our SIP-based audit and attack software in our VoIP/SIP security lab environment that simulates an enterprise-grade SIP network. We then utilize our SIP-based defense tool to realize our novel defense mechanism against the SIP-DRDoS attack. Our experimental results prove that our defense approach can do a deep packet analysis for SIP traffic, detect SIP flood attacks, and mitigate them by dropping attack packets. While the SIP-DRDoS attack with around 1 Gbps of traffic dramatically escalates the CPU (central processing unit) usage of the SIP server by up to 74%, our defense mechanism effectively reduces it down to 17% within 6 min after the attack is initiated. Our approach represents a significant advancement over the existing defense mechanisms and demonstrates the potential to effectively protect VoIP systems against SIP-based DRDoS attacks.Keywords: Session Initiation Protocol; SIP; SIP security; Voice over IP; VoIP security; denial of service; DoS; distributed denial of service; DDoS; distributed reflection denial of service; DRDoS
This article will focus on tools that allow remote service brute-forcing. These are typically Internet facing services that are accessible from anywhere in the world. Another type of password brute-force attack are against the password hash. Powerful tools such as Hashcat can crack encrypted password hashes on a local system.
let me do there it goes excellent all right well a
lot of you have already started but if um you haven't yet please introduce yourself in the chat with your name and
your agency um you can add your pronouns if you'd like or any other identifying uh factors
um we do use the attendance in the chat for um
the HUD nofo so the notice of funding opportunity application scoring process
so well that means nothing today um down the road when HUD releases their
annual competition we do check the attendance and there are points given for attendance so please make sure that
you get credit for being here by putting your name in the chat um
I had shared that I don't think our first presenter can be here today she
had emailed me that she had I'm just trying to scroll through names while saying things um I think she has a conflict is there
anyone here from 2-1-1 that's able to do a quick presentation or should we skip
ahead I'll pause for just a moment to see if anyone here
okay so I think that we should just move forward in our agenda and if somebody
from two on one is able to join us um we will backtrack and if they're not able
to join us today we could certainly add um add them to an agenda on a different
day so moving on to the next item
um Mandy Reagan we'll talk about the point in time count good morning everyone Amanda Reagan uh
pronoun she her I am involved in some of the street Outreach projects at BHS so
traditionally I've been involved in the unsheltered count um so it is January it is point in time
season for us so just as a reminder although we talk about this all the time I know you all are experts in it but uh
worth reminding what is the point in time or the pit count as we call it so it is a HUD mandated count of all
individuals who are sheltered and unsheltered who are experiencing homelessness Across the Nation
um it takes place within the last 10 days of January for the Mandate from HUD
and for us it's typically the last Wednesday of the month and we are keeping consistent with that this year
the three cocs have voted that we will be conducting the point in time on
January 25th which is a Wednesday the hours of which be being six o'clock that
night all the way overnight into 6 a.m the next morning which technically is
Thursday the 26th so for the unsheltered portion uh we are
looking at those that meet that definition of unfit for human habitation and again
because it's an overnight count traditionally here in New Hampshire we don't have robust Outreach teams that
are out overnight for the point in time so remember for all of you that are participating in the pit count if you're
going out and doing Outreach on Thursday the 26th you're going to be asking where
people stayed the night before and if you're looking at your caseloads you're going to remember that you're tracking
those that are in the homelessness experience between the hours of 6 pm and
6 a.m so there's been some confusion in the past about that so just wanted to clarify that
um in terms of the unsheltered count we have been meeting with you all regionally just to check in and see how
things are going and what your current pit plans are for your unsheltered response um there's some ample and robust
planning going on so I'm hoping that I'm just looking down the list here
um some of you that have been planning these within your regions you could just give some examples about the efforts
that you're undergoing here as we're leading up to the weeks of the Pips
and if I don't hear from anybody that I'll just call on a couple people so be warned
it's fine Mandy um
all right um so yeah right now like you said we're all trying to plan make sure that
everybody's on the same page so like you know as soon as the we get the link training in the next few
days talking about the actual Google form that we will all use yeah and then once we have the link in our hands uh we
can start making sure that all the Community Partners that are going to participate in the actual accounting
have that thing saved on their phones and are comfortable with how to use it so um you know we'll be reaching out and
making sure that all our volunteers are ready to go and that their questions are answered but
um it's you know for us traditionally what the cap team has done is from about
6 a.m in the morning we count until we leave work and make sure that anybody
um that calls in or visits the SSP or you know visits the shelter it's better
to have duplicates than it is to have someone not counted at all so
um I don't know anything I'm missing that you want me to talk about Mandy I'm so glad you mentioned the Forum training
because it will happen today at one o'clock at
the link in their newsletter uh we can send it out again just as a reminder but that will go over unsheltered as well as
anybody who does not enter into hmis so welfare or any of you other providers
out there yeah and anybody that wants to volunteer on that day please just reach out to
myself or um probably Conor spurn or Owen we'd all be happy to coordinate with you and and
get you feeling comfortable to participate in the account if you're interested foreign
count for those that are in Emergency Shelters or other locations I will tag
in ICA here because they really spearhead that side of things and actually Susan just asked a question
that I think Megan would be great for you to answer as well I don't know if you saw that in the chat about shelters
who do you enter so thank you yeah um so Susan uh this year we will again
be using your your hmis data like we like you did last year and the year before
um and we are having a live training on the 24th I believe
um specifically to show you what that report is going to look like because it
is going to look different this year um than the couple the past few years because we are in a different database
um but yeah you do not have to use the Google forms um for your data that you enter into
hmis if you though are um doing any Outreach or come to contact
that someone with someone that is unsheltered you are able to use the
Google forms to um to do that foreign
we are pulling the hmis reports um this year because it's a new system
and um there are not a lot of folks that have looker licenses uh right now in New
Hampshire which we do recommend that at least one person do um so you're not able to take
even pull that report um ica's pointless reports
um and Mandy sorry um got distracted with the hmis questions
um so yeah we'll we will be going over the Google forms and the paper survey uh
this afternoon um uh we will we will be recording that so
um anyone who isn't able to join the live session um will be able to at least take
um and watch the recorded uh we will have uh we do have demo links for
um so you can practice and see what it looks like the Google form so if you've never done a Google The Google form
before you'd be able to see um have some idea of what it might look
like and what the process is Megan are there links to those
um the demos that you could put in the chat for people yes let me find them and I
can do that very cool um oh look somebody else had the same suggestion in the chat
um perfect and we will when we send out the minutes um
we will include those as well um and I just want to thank Freeman for
the comment about the it's better to have duplicates than not absolutely
please I would rather have you enter even if you think somebody else already did um I I don't need you to call and double
check with somebody just if you have that person in front of you um do it do the the survey with them get
it entered I do some of the deduplication with ICA after the fact so we take care of that part you don't have
to worry about it just get as many people counted as you can because the better our count is the better we can
address the gaps in our system any other Mandy any other
pit comments or um any other questions from anyone in the group
that was all I had uh if anybody has any unsheltered questions you can feel free to email me or send me a link I will put
my email in the chat uh that was all I had awesome thank you all right
um I still do not see anyone from uh two on one here so we will move on to
subcommittee updates for the day um Heidi and Heidi are you here and your
co-chair is Maddie I believe for the Youth subcommittee
I'm not sure if Maddie's here Maddie are you on this call
she is um I'm not sure if she is prepared to do an update so Heidi could
you start and if Maddie's able to jump in she can totally fine so we are working together to plan for our March
coming up meeting um that will be a regroup of this uh subcommittee because we've been planning
for the Youth homelessness demonstration program Grant I think for like a year and a half now
um in terms of uh setting up projects doing implementation conversations and
really just planning for this group to come back together so we're going to be sort of re-grounding ourselves and
setting the stage for how we want to move forward in the coordinated community plan we actually have physical
copies of it now so hopefully those will go out soon um and if folks would like the um
coordinated community plan electronically um Melissa we can include it in the notes I can give that to you as well
um so there are lots of projects coming up going to be starting uh with four agencies and I think we share this in
the past but the upper room has one Waypoint has two projects
um The Claremont learning partnership has one project project and Tri-County cap has two projects so they will be
hopefully starting in the next few months
all right anything else with the youth subcommittee looking good okay thank you
um our next subcommittee update is coordinated entry and that is Christy and Freeman
I guess I'll go because I know Freeman's out during Outreach I know he's here um good morning everyone it's Christy
from BHS um we have some exciting new things that are happening in the month of January in
regards to the coordinated entry system um we are working on finalizing
coordinate entry materials for all of the regional access points within the balance of State Continuum of Care
um I'd like to give a big thank you to Owen and Connor from VM cap and the whole BM cap team who helped assist us
finalize those materials we're hoping to get them printed and distributed out to the regional access points within the
next month um they will have a flyer and also hopefully um waterproof business cards
as well so that people have the information of who to call if they're experiencing housing instability or
experiencing homelessness um we have our subcommittee
meeting tomorrow at two o'clock if you're interested please send me or Freeman an email we are also working on
getting case conferencing up and running in both Merrimack and Belknap counties we have a training for Merrimack County
this afternoon and Western Rockingham has their third case conferencing
meeting this month and Belknap has their first case conferencing meeting on Wednesday
don't think I forgot anything but Freeman feel free to chime in no you got it you got it yeah I know Owen made the
flyer uh beautiful and Conor was an amazing help so big thanks to cceh for
the collaboration and uh yeah it's a really nice flyer I think we'll represent all of our
communities well it's I think and those waterproof business cards I'm very very
stoked about because everything of our clients kind of gets washed away um and our training for Belknap County
case conferencing I thought went really really well yesterday so we're stoked to have our first actual case conferencing
uh next week um so super duper thanks for bearing with us guys we're doing the
thing uh the only last thing is we did there's a revised strapped in the Courtney entry
manual that has been sent out to the subcommittee um once we finalize a draft
um we'll send it out to the entire balance of state to take a look at so
all right anything else on coordinated entry no all right
um our next subcommittee update is the veteran subcommittee I don't know if Sean is here
don't see Sean here Mandy do you I always go to you do you have any updates on the veteran subcommittee
and Emily Racine actually from the VA is now the chair of it but I don't see her either right now so I can give an update
so the veteran subcommittees um they have combined uh across the
state so we used to do it that way and we got away from that and now we're back to that
um just to solidify across COC lines and kind of standardize the approach that
we're taking so we had the Statewide veterans Summit last June and from that steering committee was formed we've been
working on gaps that were identified in that Summit ever since um as kind of goals to meet for the next
year so part of that was case conferencing so we have been doing bi-weekly case conferencing that
happened every Monday sorry the second uh and fourth to Monday afternoon so if
anybody is interested in joining um you can send me an email and I will get you to the right person uh but
basically we go through Veterans that have our newly identified in our system as well as those outstanding uh for
getting into housing and talk through as a multi-disciplinary stakeholder group of how we can help them get into housing
and stay there um beyond that for the veteran subcommittee
I don't think I'm missing anything uh Katie who's the chair of the Manchester
committee is also here so if I have missed anything Katie feel free to jump in but
I think that's a summary for now I think you got it all Mandy
thank you all right and then Mandy we will actually stay with you for the Outreach
subcommittee update the every subcommittee we met uh I think was last month gosh running together uh
we reviewed kind of the structure of the Outreach subcommittee and where folks
um thought that it could be helpful in the day-to-day knowing that there's already Regional responses happening so
we talked about having it be a training platform as well as maybe some networking and peer connection so
um potentially having a one or two in-person larger Summits
um so more to come we are meeting bi-monthly for now
um and I think more strategy and more structure will come from it as we work together but big shout out to everybody
who came definitely excited feel the passion and feel the combination that we
all have especially in light of um some really difficult circumstances so I appreciate your willingness to come
together and have hard conversations to get through and serve those most vulnerable
excellent thank you um all right so those are our subcommittee updates
this month we thought we would try something new um and I didn't prep everyone so if
we're not if people from the different regions are not prepared for this I completely understand and nobody is
going to be um nobody's gonna be yelled at by me anyway so I'm just hoping we can try and
start getting more Regional updates at this meeting because the purpose of the balance of State really is to hear about
all of the great work that's happening across our entire geography and since our geography is almost the entire State
of New Hampshire um I thought it would be great to hear from folks other than just me every time
so I have the list that was created for the housing Summit back in
October November um I can't remember exactly when that happened but it was created for that purpose I'm just going to go through an
order and call out the different groups and if there's somebody here who attends
that meeting or leads that meeting that is able to give some kind of update that would be great and then I promise over
the next couple months to actually reach out to all of you to be better prepared for next time this is just a trial to
see how it goes so we will start with the Belknap County lsda group is there
anyone here who can give a brief update
I'm hearing crickets okay we will move on to Berlin Gorham
Homeless Solutions Network sounds like a job for me all right so uh
we over the last two months have been focused primarily on the pit count um we
right now have four pit stop locations uh one in Colebrook with the TCAP
Connect trailer which I just got permission for and then FRC in Berlin and Gorham as well as Saint Barnabas are
going to put some soup on um and then we've been doing that same thing across across the different
counties but uh we're gearing up for that uh and
we're excited excellent thanks Eric
okay the Concord provider network is there anyone who could give an update for that one
no okay uh Northern Carroll County provider
Network
and I think I got an update by email saying this meeting had switched back to zoom so I will update this to make sure
it reflects that and we can share this document again out with our minutes
nobody for that group okay uh next is the greater Keen Homeless
Coalition hey how's everyone doing
we're good Craig so uh good so we have uh Kevin from MFS uh
we're down one Outreach workers so MFS the path worker for MFS is taking on the the pit work in Cheshire county and we
have Jim Doherty which is our ESG Outreach worker kind of taking the lead in Sullivan County
um what's nice is that we had a Community Partners meeting last week and I really told everyone I said you know
even if you think in your wildest dreams you may come in contact with somebody and this is more than 30 or 40 agencies
that is is Street Homeless or literally homeless have somebody in your agency be the contact person and reach out to Jim
right because as you said Melissa we don't want to worry about duplication Mandy thank you so much Mandy has a list
of the pit counts for the last 10 years and it's very interesting for folks to take a look at that you can really see
the trends in our community now whether it's because of our how much we participated in it or if it's really
truly the way the economy is going or Graphics are going but it's really
something to look at and so Sullivan County is where I've been kind of focusing because we've had big zeros for
the last few years and I know that we can do better than nothing so uh you
know we're really focusing on that area the welfare departments are are helpful
we're reaching out to the social workers in the hospitals and also the sau's as
well so other than that SCS has had a whole bunch of weatherization work done
and upgrades to our shelters we're frantically trying to hire like
everybody else is for another Outreach worker and for a emergency housing coordinator in our shelters
and uh you know I don't think it's a shock to anybody but in 2020 in Keene we
served 101 people and we served 193 in Keen in 2022. that's a 90 increase of
the homeless population that we're serving so I think everybody is really stretched very thin
no I just wanted to say I really appreciate you acknowledging that because it can it's really easy for
everyone to kind of get caught up in their own day-to-day um you know just the busyness of our work
and acknowledging that we're all facing that I think is really important so thank you for saying that
all right um next on our list is home for all
is there anyone from the home for all group that could give an update
sorry I'm a muting yeah this is this is Damien Santana and I work with
Carl rottenheiser and um support the home for all project through
um Grant United Way's work so an update on a couple of things that
home for all are working on right now is we have a coalition meeting coming up on the 12th
to regroup with area Partners around um a strategy for the next year to
address homelessness on the Seacoast we also have the affordable housing incentive program uh out on the Seacoast
which looks to incentivize housing for low-income tenants and families by
providing case management through local area uh first-tier shelter partners
and providing resources to landlords to help to avoid things like tenancy issues
or eviction processes or if those things are inevitable how to sort of facilitate
those to make them less burdensome on the landlords as well as the tenants
and other than that I don't have any other updates at the moment
excellent thank you um let's see sorry working Better Together North Country
[Music] okay housing first for the Lebanon group
I thought I saw Lynn Lynn are you still here I'm here hi perfect so we have a
new program operating this winter in the absence of a seasonal shelter in
our area the city of Lebanon authorized up to a hundred thousand
dollars to provide seasonal Sheltering for up to 10 households in January and
February and we have partnered with the Upper Valley Haven which is a shelter and homeless service provider in Vermont and
Terry Sullivan is on the call from the Haven The Haven is working with Lebanon Human
Services to refer Lebanon residents experiencing homelessness to this program the plan is to shelter them in
motel rooms and have weekly Supportive Services
provided by The Haven and it's a very expensive way to provide seasonal
shelter there's enough money set aside by the city to book 10 hotel rooms
whether they're used or not to make sure we have access to motel rooms but right now we've been fortunate that there are
still vacancies so we are not having to do that at the moment and hoping that this is continuing to
build awareness in our community about the need for shelter as well as demonstrate that there are more cost
effective options than motel rooms
that's it thanks Lynn and the last one on our list for the
balance of state is Western Rockingham Rockingham um Continuum of Care sorry Angie I can't
say words today are you still so good it's a long long uh name um yeah so things are going well down
here in West Rockingham County as everybody knows we do not have any shelters so um a lot of our homeless individuals or
families um they're either doubling up couch surfing or uh in their vehicles or
trying to get into shelters uh within Nashua Manchester or even Fort Smith
um most families do not want to do that so they're trying to see if other family members can take them in in the interim
um our meetings are going great monthly the case conferencing is going amazing we've come up with a couple resolutions
for some people one is going to be joining the uh Job Corps he's actually going to be going out to I believe it's
Montana or wine opening soon uh so we're helping get him prepared for that
um excuse me and I did have a meeting with the upper room here in town yesterday with Brenda and Cara so they
will be joining our once a month meeting as well to tackle uh homelessness within
our County as well as as ideas for them with use youth homelessness as well
because they've joined Heidi uh on that front as well awesome
those are excellent updates thank you you're welcome uh so that is the end of our list
um I know that I didn't prep everyone that we were going to do this in advance so I appreciate everyone that was
willing to be put on the spot to give us a brief update um I will try to reach out to everyone that's listed as a chairperson to see if
we could have people ready to do this next time um
we did not add to the agenda a couple of things that I'm going to share and then
we'll go to an open floor um I believe most people know that the
balance of State Continuum of Care was monitored by Hud some number of months ago I think it was in July it might have
been August um we did have four findings from that monitoring
two of them were completely outside of our control one was about the single audit for the State of New Hampshire
which is managed by I believe the legislative Bureau um
and we we were able to get that one resolved by having our legislative team
write the response and explanation about why BHS cannot choose the auditor for
the State of New Hampshire single audit so that was resolved quite easily we had a second finding about who signs
the invoices because there was um confusion at the HUD level about the
structure of DHHS and the finance teams so once we were able to send a flowchart over that one was actually resolved
quite easily as well um we have two that are outstanding and
we have submitted um further documentation to HUD for that
HUD has informed us that they have to go to headquarters to ask about
those findings uh we were able to with the support of our sub recipient agency
uh Stratford cap that was the project chosen this time we were able to provide
the actual Federal Regulation that shows we're able to use the funding the way
that it was used but our HUD rep uh is would prefer to go to headquarters
for confirmation first so we are just waiting for headquarters to respond to them and then
them to respond back to us so we we feel pretty confident that those last two
findings will be resolved quite easily it's just a matter of um waiting for this chain of
communication to make its way back to us Chrissy anything I missed about the monitoring
I'm not the only thing that I would say is there there could be a slight impact
to sub-recipient agencies depending on one of the responses from HUD um
I also submitted two aaqs which is ask a question to hide about
um eligible expenses so we're waiting on those responses as well
we don't think it'll be a big i