Voice over IP (VoIP) introduces new ways of communication, while utilizing existing data networks to provide inexpensive voice
communications worldwide as a promising alternative to the traditional PSTN telephony. SPam over Internet Telephony (SPIT)
is one potential source of future annoyance in VoIP. A common way to launch a SPIT attack is the use of an automated procedure
(bot), which generates calls and produces audio advertisements. In this paper, our goal is to design appropriate CAPTCHA to
fight such bots. We focus on and develop audio CAPTCHA, as the audio format is more suitable for VoIP environments and we
implement it in a SIP-based VoIP environment. Furthermore, we suggest and evaluate the specific attributes that audio CAPTCHA
should incorporate in order to be effective, and test it against an open source bot implementation.