Security Company Outlines VoIP Vulnerabilities

January 19, 2005

Supreme Security Systems, a New Jersey provider of electronic security systems, came out with this release today:

VoIP: Security Vulnerabilities for Commercial and Residential Clients

The company outlines VoIP issues that can interfere with or disable burglar alarms and fire alarms and obstruct access to emergency services. Issues can include signal distortion, power failure, line seizure and service outages.

Here is an excerpt from Supreme Security Systems' report, detailing several key vulnerabilities:

* Signal Distortion -- Most alarm systems were designed to transmit alarm
signals as a series of beeps and tones over analog phone lines. Because
VoIP systems utilize digital communications, the conversion of the
beeps and tones are not always translated correctly. This can result in
an alarm signal not being recognized by its central monitoring station.

* Power Failure -- In the event of a power failure, cable modems and DSL
lines will not work unless there is an on-premise power backup or
generator. Losing power, can mean losing communication with the outside
world. Not only will the alarm system not be able to communicate with
the central station, it will not be able to dial 911 or access other
emergency services.

* Line Seizure -- Alarm systems are designed with line seizure
capabilities -- enabling them to take over an open phone line to
communicate with the central monitoring station in case of an
emergency. Often, the cable company or ISP will actually install the
VoIP modem in a residence by 'back-feeding' the house circuit and
disconnecting the old telephone circuit as it enters the premise.
Because the alarm control panel is configured to have the telephone
circuit connected first, ahead of any telephone instruments, it can
interrupt and disconnect an existing call to give the alarm signal
priority.

* Service Outage -- Internet service providers and cable companies are
also susceptible to service outages. The Internet is not always
accessible to transmit alarm signals. Service outages, server
malfunctions, and system upgrades and regular maintenance are just some
of the reasons that VoIP systems may not be as reliable as analog phone
systems to transmit alarm signals.

The company recommends retaining a POTS land line for emergency use, such as 911, or a long-range radio backup service.

AB -- 1/19/05