{"id":6116,"date":"2007-11-24T12:01:08","date_gmt":"2007-11-24T12:01:08","guid":{"rendered":"http:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/e-commerce\/the-latest-voip-security-threat.html"},"modified":"2007-11-24T12:01:08","modified_gmt":"2007-11-24T12:01:08","slug":"the-latest-voip-security-threat","status":"publish","type":"post","link":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/technology\/the-latest-voip-security-threat.html","title":{"rendered":"The Latest VoIP Security Threat"},"content":{"rendered":"<div>\n<div style=\"MARGIN: 0in 0in 0pt\">For years I have been covering VoIP security and throughout this time it has been a one-sided conversation as there have been few documented cases of VOIP security attacks. Companies are generally not too happy to discuss VoIP security breaches so this news shouldn&rsquo;t be very surprising to anyone.<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">&nbsp;<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\"><img decoding=\"async\" hspace=\"3\" align=\"left\" vspace=\"3\" alt=\"\" src=\"http:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/uploads\/trojan-horse.jpg\" \/>In the absence of news regarding companies who have had voice or video conversations compromised, vendors in the VoIP security market have been proactive. Some such as Sipera have <a href=\"http:\/\/internetcommunications.tmcnet.com\/topics\/enterprise\/articles\/9840-sipera-viper-takes-bite-out-voip-uc-network.htm\">revealed<\/a> vulnerabilities of existing equipment and more recently one person has even released a proof-of concept program named SIPtap with the goal of showing how easy it is &#8212; once a program is slipped onto a corporate computer via a Trojan horse or some other means, to record enterprise VoIP calls as WAV files for later analysis.<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">&nbsp;<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">The person behind this proof of concept program is Peter Cox who co-founded and was CTO of BorderWare, a company in the VoIP security and session border control space. I first wrote about the company in August, 2005 in a blog entry titled <a href=\"http:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/voip\/secure-voip.html\">Secure VoIP<\/a> and I covered them more recently in an entry titled <a href=\"http:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/ip-communications\/borderwares-sbc-strategy.html\">Borderware&#8217;s SBC Strategy<\/a>.<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">&nbsp;<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">Cox left BorderWare and has his own VoIP Consultancy which will be up and running in 2008 according to <a href=\"http:\/\/www.pcworld.com\/article\/id,139870-c,webtelephonyconferencing\/article.html\">PC World<\/a>.<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">&nbsp;<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">The issue of protecting VoIP calls is likely something corporate decision-makers gloss over all too often and just because companies are not reporting more security incidents, does not mean they aren&rsquo;t happening.<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">&nbsp;<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">In the end, if you are responsible for the IP communications infrastructure of your company you need to be 100% up to date on the latest solutions on the market.<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">&nbsp;<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">For this reason it is essential you study the problem as thoroughly as time allows and network with others in the space.<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">&nbsp;<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">One way to do this is to attend TMC&#8217;s <a href=\"http:\/\/www.tmcnet.com\/voip\/conference\/\">Internet Telephony Conference &amp; Expo<\/a> in Miami, January 23-25, 2008 where there is a session titled <a href=\"http:\/\/www.tmcnet.com\/voip\/conference\/east-08\/e-08-conferences.aspx?t=E#E-04\">Security Challenges in the Enterprise<\/a>, which takes place Wednesday &ndash; January 23, 2008, 1:30-2:15pm EST.<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">&nbsp;<\/div>\n<div style=\"MARGIN: 0in 0in 0pt\">As more and more crucial information gets carried over internet protocol networks, the incentive to eavesdrop on these conversations will grow dramatically. Moreover as SIP becomes ubiquitous, the knowledge needed to perform hacks such as the one described in this article will only grow. The sooner you learn about how to effectively secure your corporate IP communications, the better off you and your company will be.<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>For years I have been covering VoIP security and throughout this time it has been a one-sided conversation as there have been few documented cases of VOIP security attacks. Companies are generally not too happy to discuss VoIP security breaches so this news shouldn&rsquo;t be very surprising to anyone. &nbsp; In the absence of news<\/p>\n","protected":false},"author":44,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[180,202,199,197,188,156,189,118,177,191,175],"tags":[],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts\/6116"}],"collection":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/comments?post=6116"}],"version-history":[{"count":0,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts\/6116\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/media?parent=6116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/categories?post=6116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/tags?post=6116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}