Research Article
Voice over Internet Protocol (VoIP) has changed the way people communicate all over the world because it provides people with flexible and inexpensive alternatives to the traditional telephony. But this change presents complicated security and forensic issues that require expert investigation techniques. This review sees a significant shift in the open-standard protocol analysis towards the application-specific study of encrypted proprietary platforms including Zoom, Discord and Microsoft Teams. Memory forensics is now capable of retrieving volatile evidence found in RAM and machine learning has improved the detection of encrypted traffic to more than 95 percent. There are still persistent problems with real-time evidence collection, cross-platform compatibility and compatibility against developing encryption standards. The upcoming studies aim at automation, privacy preserving methods of investigation, and quantum resistant security models that would address the new forensic requirements.
Alo, U. R., & Firday, N. H. (2013). Voice over Internet Protocol (VoIP): Overview, direction and challenges. International Journal of Science and Technology, 2(3), 199–205.
Al-Saadawi, H., & Varol, A. (2017). Voice over IP forensic approaches: A review. IEEE Xplore, 1–6. https://doi.org/10.1109/isdfs.2017.7916507
Al-Saleh, M., & Forihat, Y. A. (2013). Skype forensics in Android devices. International Journal of Computer Applications, 78(7), 38–44. https://doi.org/10.5120/13504-1253
Anwar, U., Shabbir, G., & Ali, M. A. (2014). Data analysis and summarization to detect illegal VoIP traffic with call detail records. International Journal of Computer Applications, 89(8), 1–7. https://doi.org/10.5120/15519-2724
Arshad, M., Ahmad, A., Onn, C. W., & Sam, E. A. (2025). Investigating methods for forensic analysis of social media data to support criminal investigations. Frontiers in Computer Science, 7, Article 1566513. https://doi.org/10.3389/fcomp.2025.1566513
Azad, M. A., Morla, R., & Salah, K. (2018). Systems and methods for SPIT detection in VoIP: Survey and future directions. Computers & Security, 77, 1–20. https://doi.org/10.1016/j.cose.2018.03.005
Chakraborty, T., Ghosh, S., Barik, S., Kar, S., & Chatterjee, S. (2020). VoIP-HDK: A novel channel allocation technique for QoS-aware VoIP communication over heterogeneous networks. Procedia Computer Science, 171, 62–71. https://doi.org/10.1016/j.procs.2020.04.007
Chaudhari, G., Korde, P., Patil, S., & Bhongal, R. (2023). VoIP-based intelligence calling system. International Journal of Advanced Research in Science, Communication and Technology, 3(7), 1–6.
Chetry, A., & Sharma, U. (2024). Investigating VoIP calls: Law enforcement perspective. INFOCOMP Journal of Computer Science, 23(2). https://infocomp.dcc.ufla.br/index.php/infocomp/article/view/3398
Eriksson, G. A. P., Olin, B., Svanbro, K., & Turina, D. (2000). The challenges of Voice-over-IP-over-wireless. Ericsson Review, 1, 20–31. https://www.scribd.com/document/45080044/2000-the-Challenges-of-Voice-Over-IP-Over-Wireless
Federal Communications Commission. (2019). Voice over Internet Protocol (VoIP). https://www.fcc.gov/consumers/guides/voice-over-internet-protocol-voip
Freire, E., Ziviani, A., & Salles, R. (2008). Detecting VoIP calls hidden in web traffic. IEEE Transactions on Network and Service Management, 5(4), 204–214. https://doi.org/10.1109/TNSM.2009.041102
Gupta, K., Lanka, P., & Varol, C. (2024). A holistic digital forensic analysis of Discord: Storage, memory, and network perspectives. Journal of Forensic Sciences, 69(4), 1320–1333. https://doi.org/10.1111/1556-4029.15548
Iqbal, F., Khalid, Z., Marrington, A., Shah, B., & Hung, P. C. (2022). Forensic investigation of Google Meet for memory and browser artifacts. Forensic Science International: Digital Investigation, 43, 301448. https://doi.org/10.1016/j.fsidi.2022.301448
Irwin, D., & Slay, J. (2011). Extracting evidence related to VoIP calls. In IFIP Advances in Information and Communication Technology (pp. 221–228). https://doi.org/10.1007/978-3-642-24212-0_17
Irwin, D., Slay, J., Dadej, A., & Shore, M. (2011). Extraction of electronic evidence from VoIP: Forensic analysis of a virtual hard disk vs RAM. Journal of Digital Forensics, Security and Law, 6(3). https://doi.org/10.15394/jdfsl.2011.1086
Irwin, D., Dadej, A., & Slay, J. (2012). Extraction of electronic evidence from VoIP: Identification and analysis of digital speech. Journal of Digital Forensics, Security and Law, 7(1). https://doi.org/10.15394/jdfsl.2012.1128
Javed, A. R., Ahmed, W., Alazab, M., Jalil, Z., Kifayat, K., & Gadekallu, T. R. (2022). A comprehensive survey on computer forensics: State of the art, tools, techniques, challenges, and future directions. IEEE Access, 10, 11065–11089. https://doi.org/10.1109/ACCESS.2022.3142508
Kapoor, M., Napolitano, M., Quance, J., Moyer, T., & Krishnan, S. (2023). Detecting VoIP data streams: Approaches using hidden representation learning. Proceedings of the AAAI Conference on Artificial Intelligence, 37(13), 15519–15527. https://doi.org/10.1609/aaai.v37i13.26840
Khan, A., & Suryawanshi, R. (2019). Performance analysis of VoIP codecs under variable jitter and delay conditions. International Journal of Computer Applications, 178(43), 1–6. https://doi.org/10.5120/ijca2019918704
Kumar, V., & Roy, O. P. (2022). Enhanced network security for improved trustworthiness of VoIP applications via cuckoo search and machine learning. Indian Journal of Science and Technology, 15(15), 677–688. https://doi.org/10.17485/ijst/v15i15.1379
Mohemmed Sha, M., Manesh, T., & Abd El-atty, S.M (2016). VoIP forensic analyzer. International Journal of Advanced Computer Science and Applications, 7(1). https://doi.org/10.14569/ijacsa.2016.070116
Olateju, A. I., Adenekan, O. A., & Abatan, T. T. (2019). Performance evaluation of Voice over Internet Protocol (VoIP) on wired and wireless networks. Journal of Digital Innovations & Contemporary Research in Science, Engineering & Technology, 7(2), 87–100. https://doi.org/10.22624/AIMS/DIGITAL/V7N4P9
Rebahi, Y., Nassar, M., Magedanz, T., & Festor, O. (2011). A survey on fraud and service misuse in Voice over IP (VoIP) networks. Information Security Technical Report, 16(1), 12–19. https://doi.org/10.1016/j.istr.2010.10.012
Rebahi, Y., Ruppelt, R., Nassar, M., & Festor, O. (2013). SCAMSTOP: A platform for mitigating fraud in VoIP environments. Proceedings of the International Conference on Network and Service Management.
Sarhan, S. A. E., Youness, H. A., & Bahaa-Eldin, A. M. (2022). A framework for digital forensics of encrypted real-time network traffic, instant messaging, and VoIP application case study. Ain Shams Engineering Journal, 14(9), 102069. https://doi.org/10.1016/j.asej.2022.102069
Sarhan, S. A. E., Youness, H. A., Bahaa-Eldin, A. M., & Taha, A. E. (2024). VoIP network forensics of instant messaging calls. IEEE Access, 12, 9012–9024. https://doi.org/10.1109/ACCESS.2024.3352897
Saqib, N. A., Shakeel, Y., Khan, M. A., Mahmood, H., & Zia, M. (2017). An effective empirical approach to VoIP traffic classification. Turkish Journal of Electrical Engineering & Computer Sciences, 25, 888–900. https://doi.org/10.3906/elk-1501-126
Sgaras, C., Kechadi, M., & Le-Khac, N. (2016). Forensics acquisition and analysis of instant messaging and VoIP applications. arXiv. https://doi.org/10.48550/arxiv.1612.00204
Singh, S. (2024). Performance improvement for VoIP-based systems. Wireless Personal Communications, 139(1), 145–166. https://doi.org/10.1007/s11277-024-11594-2
Sreenivasulu, V., & Ravikumar, C. (2025). FractalNet-based key generation for authentication in Voice over IP using blockchain. Ain Shams Engineering Journal, 16(3), 103286. https://doi.org/10.1016/j.asej.2025.103286
Soni, N. (2025). Digital forensics: Confronting modern cybercrimes, technological advancements, and future challenges. Forensic Legal & Investigative Sciences, 11(1). https://doi.org/10.24966/flis-733x/100105
Tiwari, N. S. K. (2025). Forensic analysis of browser-based GoToMeeting clients: Uncovering memory and browser artefacts. Journal of Information Systems Engineering & Management, 10(20s), 483–495. https://doi.org/10.52783/jisem.v10i20s.3172
Toral-Cruz, H., Pathan, A. K., & Pacheco, J. C. R. (2011). Accurate modeling of VoIP traffic QoS parameters in current and future networks with multifractal and Markov models. Mathematical and Computer Modelling, 57(11–12), 2832–2845. https://doi.org/10.1016/j.mcm.2011.12.007
Tresnadi, A. (2025, March 17). Decrypting Zoom team chat: Forensic analysis of encrypted chat databases. InfoSec Write-ups. Retrieved 14,2025, from https://infosecwriteups.com/decrypting-zoom-team-chat-forensic-analysis-of-encrypted-chat-databases-394d5c471e60
Tuleun, N. W. (2024). Design of an Asterisk-based VoIP system and the implementation of security solution across the VoIP network. World Journal of Advanced Research and Reviews, 23(1), 875–906. https://doi.org/10.30574/wjarr.2024.23.1.2048
Wright, C. V., Ballard, L., Monrose, F., & Masson, G. M. (2007). Language identification of encrypted VoIP traffic: Alejandra y Roberto or Alice and Bob? Proceedings of the USENIX Security Symposium. https://www.usenix.org/legacy/events/sec07/tech/full_papers/wright/wright.pdf
Wu, C., Chen, K., Chang, Y., & Lei, C. (2008). Detecting VoIP traffic based on human conversation patterns. In Lecture Notes in Computer Science (pp. 280–295). https://doi.org/10.1007/978-3-540-89054-6_14
Yang, H., Yang, Z., Bao, Y., Liu, S., & Huang, Y. (2019). Fast steganalysis method for VoIP streams. IEEE Signal Processing Letters, 27, 286–290. https://doi.org/10.1109/LSP.2019.2961610
Yu, S., Li, B., Zhu, L., Zhang, H., Yang, S., Li, Z., & Feng, W. (2025). Tencent Meeting forensics based on memory reverse analysis. PeerJ Computer Science, 11, e2963. https://doi.org/10.7717/peerj-cs.2963
Zhu, Y., & Fu, H. (2010). Traffic analysis attacks on Skype VoIP calls. Computer Communications, 34(10), 1202–1212. https://doi.org/10.1016/j.comcom.2010.12.007
Downloads
How to Cite
License
Copyright (c) 2026 SIARE Proceedings: Engineering Sciences

This work is licensed under a Creative Commons Attribution 4.0 International License.
https://doi.org/10.1093/geront/gnt138