Podcast - SIP/VoIP Attacks - X-Rated Voice

June 5, 2008
Most importantly, understand your opponent has more time, is more focused and is more eager to attack you. While SIP brings advancement in VoIP call connections, SIP faces the same security attacks as other IP protocols such as HTTP-Hyper Text Transfer Protocol and SMTP-Simple Mail Transport Protocol such as:
- Malformed message attacks
- SPIT-SPam over Internet Telephony
- Buffer overflow attacks
- VOMIT-Voice Over Misconfigured Telephony
- DOS-Denial-of Service attacks (overload, part SYN, FIN)
- Eavesdropping
- Masquerading (Trojan Horses) as a phone, user, server, as a customer
- Calljacking - hijacking
- RTP/RTCP session teardown attacks
- RTP/RTCP malformed messages
- RTP/RTCP buffer overflow attaches
- RTP play-out or Media spamming
- X-rated voice and video "crosstalk"
- SDP changing CODECs attacks
- Injection of malicious RTP packets into existing RTP flows and other known and yet to be created attacks. 
 
The animated tutorial helps explain how the process works. More indepth discussion and analysis can be found in the course. Hacker comes from the term hack which is slang that software programmers use to describe writing computer programs. Cracker comes from safe/vault crackers to break/crack into a vault safe. White Hat Hacker is a good or trusted programmer and Black Hat is a bad or untrusted disgruntled person whose desire is to cause injury or disrupt computer systems. Grey Hat is a programmer of uncertain intent.
 
This free presentation is produced and presented by TECHtionary.com and is available in Adobe Flash (.swf), Quicktime (.mov), audio-only (.mp3) and iPod/iPhone (.mv4) formats for download at: http://www.bizcastingonline.com/educate/media/podcasts/security for the next week when it will be removed unless you are part of the TECHtionary dealer program where there is no expiration. Podcast tutorials, animations and online courses are free to channel partners – see terms and conditions at http://www.techtionary.com/techu/
This presentation is also included in TMC University special course on Microsoft OCS-Office Communications Server at ITexpo.com. For more go here:http://www.tmcnet.com/voip/conference/west-08/tmc-university-microsoft-ocs.htm


Related Tags: , ,

Listed below are links to sites that reference Podcast - SIP/VoIP Attacks - X-Rated Voice:

Trackback Pings

TrackBack URL:
http://blog.tmcnet.com/mt3/t.fcgi/36242

Comments to Podcast - SIP/VoIP Attacks - X-Rated Voice


(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)