Security competitions are an important part of educating and providing simulated real-world information security experience to students. They provide a sandbox that is intended to simulate the types of network services and scenarios that will be encountered in the modern enterprise. The Information Security Talent Search (ISTS) is one such competition hosted annually by the Rochester Institute of Technology. Recognizing the importance of voice services in the modern business, the ISTS team developed a more comprehensive voice architecture for ISTS 12 in 2015. This talk explores the infrastructure that was developed, vulnerabilities that were introduced, operational results of the competition, and ideas for future growth. It is ideal for students and organizers of security competitions, as well as those who are new to voice over IP, Asterisk, and the security concerns surrounding these topics.
Anthony Critelli graduated summa cum laude from the Rochester Institute of Technology with a B.S. in Networking and Systems Administration in May 2014. He designed, deployed, and operated the voice infrastructure for the 2015 Information Security Talent Search at RIT. He has a strong interest in voice over IP and its security, particularly as implemented on Asterisk platforms. Anthony currently works in network operations at Harris Corporation.