Malicious Invite
Hello All,
Having already the URI of registered subscribers, can an attacker send successfully an INVITE to the SBC on behalf of one registered subscriber?
What would be the behavior of the SBC for such cases?
I guess the SBC should reply with 401 Unauthorized.
But, on the other hand, the INVITE is supposed to be sent on behalf of an already registered subscriber.
So no need to be authenticated again. Isn't it ?
Looking forward to your comments.
Best Regards,