Penetračné testovanie VoIP komunikácie

GLONČÁKOVÁ, Kristína: Penetration Testing of VoIP Communication.[Bachelor’s Thesis] – University of Žilina, Faculty of Management Science and Informatics,Department of Information Networks. – Supervisor: Ing. Marek Moravčík, PhD. Žilina: FRIUNIZA, 2025.The aim of this bachelor’s thesis was to design and implement a penetration testingmethodology for Voice over IP (VoIP) communication, with a focus on improving itssecurity. The introductory part includes an analysis of VoIP system architecture, focusingon the SIP and RTP protocols. The analysis also covers known vulnerabilities and existingframeworks for penetration testing. Based on a comparison of three well-establishedmethodological approaches, the most suitable one was selected, further refined, and adaptedto the specific characteristics of VoIP technologies.The practical part of the thesis focuses on the implementation of the proposedmethodology within a real infrastructure. The test results confirmed the functionality of themethodology and highlighted real risks present in VoIP environments. The work alsoidentifies opportunities for further development, particularly in the form of an automatedtesting tool and the extension of the methodology to other services within UnifiedCommunications.Keywords: VoIP, SIP, RTP, security, penetration testing, vulnerabilities, PTES