System and method for VoIP honeypot for converged VoIP services

摘要

Disclosed herein are systems, methods, and computer-readable storage media for a honeypot addressing cyber threats enabled by convergence of data and communication services in an enterprise network. Suspicious incoming VoIP calls from the Internet to the enterprise network are intercepted and directed to a VoIP honeypot that acts as a network decoy and responds automatically during call sessions for the suspicious incoming VOIP calls while tracing the suspicious incoming VOIP calls. Suspicious outgoing VoIP calls from the enterprise network to the Internet are also intercepted and directed to the VoIP honeypot. Moreover, an unsolicited VoIP call is redirected to the VoIP honeypot when the unsolicited VoIP call has been received by a user agent in the enterprise network and a human user of the user agent confirms that the unsolicited VoIP call was unsolicited.

主权项

1. A method comprising:
establishing, at a voice over Internet protocol (VoIP) honeypot in a network, an occupancy schedule for a virtual user agent associated with the VoIP honeypot the VoIP honeypot acting as a decoy; intercepting an unsolicited incoming VoIP call to the network when the unsolicited incoming VoIP call is addressed to the virtual user agent; directing the unsolicited incoming VoIP call to a voice mailbox associated with the VoIP honeypot when the occupancy schedule indicates that the virtual user agent is unavailable when the unsolicited incoming VoIP call is received; and responding, at the VoIP honeypot, to the unsolicited incoming VoIP call during a call session while tracing the unsolicited incoming VoIP call.