PGP VOIP - Privacy Encryption and Security


Tuesday, 06 January 2009

A blog of all section with no images
Infosec comes down on VoIP vulnerability PDF Print E-mail
Written by Administrator   
Monday, 08 May 2006
Delegates at Infosec gave a resounding dismissal to a motion supporting VoIP deployment. The debate, “this house believes that the business advantages of VoIP outweigh the security concerns” ended in a fairly unanimous thumbs down, which implied security professionals don't think the technology is ready for big money corporate rollouts.

The proposers of the motion, a pair of technology consultants, said the cost benefits from switching to VoIP were great enough to make tackling the vulnerabilities head-on worthwhile. The sandwich technicians of Pret A Manger are saving themselves £10,000 per month on their communications spend having made the leap, they said.

The opposing pair, from investment banks, successfully argued that putting all their communications eggs in an IP basket is too risky at the moment.

Full article here
CALEA Wiretapping Ordered for VoIP Providers PDF Print E-mail
Written by Administrator   
Friday, 05 May 2006
Communications Assistance for Law Enforcement Act (CALEA) compliance order was issued Wednesday for all VoIP providers. Originally enacted in 1994, CALEA serves as a "back door" for law enforcement agencies that need to intercept communications of suspected criminals. A joint petition filed by the Department of Justice, Federal Bureau of Investigation, and Drug Enforcement Administration in March 2004 was the impetus for the current application of CALEA to VoIP.

Full article here
IP Security in a Hosted Environment PDF Print E-mail
Written by Administrator   
Tuesday, 02 May 2006
Hosted IP refers to an IP telephony deployment where the IP PBX, associated application servers, and primary media gateways are located, or "hosted," in the service provider’s network. You, in turn, deploy IP phones and failover media gateways on the enterprise premises. The service provider (or a third party) then manages the voice application for you.

As with an IP PBX deployment, hosted IP deployments will have security issues you must be aware of. Hosted IP security will often be the responsibility of the service provider, so you will need to analyze their security approach and make sure it satisfies your requirements. You should also consider improving security through the components you can manage, including network switches, enterprise firewalls, and SIP-aware firewalls/Secure Edge Proxies (SEPs).

Full article here
Securityfocus details two SIP Hacks PDF Print E-mail
Written by Administrator   
Wednesday, 26 April 2006
"This purpose of this article is to discuss two of the most well known attacks that can be carried out in current VoIP deployments. The first attack demonstrates the ability to hijack a user's VoIP Subscription and subsequent communications. The second attack looks at the ability to eavesdrop in to VoIP communications. Although VoIP is implemented using various signaling protocols, this article focuses on attacks associated with the SIP (Session Initiation Protocol), an IETF standard (RFC 3261). The two attacks, among others such as DoS, have been discussed in various research papers but they haven't been acknowledged publicly as active attacks."

Full article here
Last Updated ( Wednesday, 26 April 2006 )
<< Start < Prev 1 2 3 4 5 6 7 Next > End >>

Results 17 - 24 of 51