 |
 | Vonage Forum Menu |
| | |
| Vonage Forums |
|
|
| | | |
| Vonage In The News |
| | |
| Vonage Customer Reviews |
| | |
| |
Vonage Industry group sets out to make VOIP secure
Stephen Lawson, IDG News Service
29/03/2005
Industry group sets out to make Voip secure
Stephen Lawson, IDG News Service
29/03/2005 13:14:49
A group formed to head off Voip (voice over Internet Protocol) security problems laid out its first set of priorities on Monday: setting up a taxonomy to classify threats and establishing the requirements for making Voip secure.
The Voip Security Alliance (VOIPSA), which was established last month and includes Verizon Communications, Nortel Networks, VeriSign, PricewaterhouseCoopers and about 50 other vendors and service providers, also announced its first board of directors.
Initially, the group will set up two committees, according to David Endler, VOIPSA chairman and director of security research at Tipping Point, a 3Com company that sells intrusion prevention gear. One committee will figure out a way to classify threats and the other will define security requirements for Voip equipment and security components, as well as for network architecture and management and user authentication. Armed with the results of these committees, VOIPSA will move on to defining best practices, developing test methodologies, driving research into vulnerabilities and educating the industry and public, Endler said. VOIPSA is not intended as a standards organization but as a vendor-independent resource for the industry, he said.
VOIPSA aims to prevent a common problem with popular new technologies, such as Wi-Fi wireless LANs, in which the technology is quickly adopted and only later does the industry find and address security problems, Endler said.
Potential dangers to Voip include DDOS (distributed denial of service) attacks, voice spam and a form of phishing in which attackers could spoof the phone number of a legitimate caller on a caller ID display, Endler said. The threats are only beginning to emerge, but over time they're likely to proliferate, even getting into the hands of inexperienced hackers known as "script kiddies," he said.
"The same security threats that plague data networks today are inherited by VOIP," Endler said. But the addition of Voip as an application on the network makes those threats even more dangerous, he added. For example, a DDOS attack may slow down someone browsing the Web, but on a Voip network it could prevent 911 calls, he said. "By adding Voip components to your data network, you're also adding new security requirements."
Though the group has a broad roster of equipment vendors, service providers and security companies, major Voip names such as Cisco Systems, Vonage Holdings and chip maker Texas Instruments are not yet members. Those companies all have been invited, Endler said.
Cisco declined the invitation because it's already working on enhancing Voip security through standards organizations such as the Internet Engineering Task Force, International Telecommunication Union and SIP (Session Initiation Protocol) Forum, said Roger Farnsworth, a Cisco product marketing manager. Cisco believes it ships secure Voip systems today and has published its own set of guidelines for implementing secure IP telephony as part of the Cisco SAFE Blueprint series, he said.
"We thought it would be redundant to join another group that is addressing these problems," Farnsworth said. "If they specify activities that are in the interests of the industry and aligned with Cisco's interests, we'll be the first to line up," he added.
IDC Voip analyst William Stofega is cautiously optimistic about the alliance.
"I think they have enough critical mass between carriers and vendors that it should provide enough momentum to solve some of the outstanding problems," Stofega said. However, the addition of more service providers and a dominant company such as Cisco or Microsoft Corp. would help, he added.
Other major threats to Voip networks include spam calling, tapping into calls and denial of service, Stofega said.
One frequently overlooked area that should be addressed in VOIPSA's guidelines is physical security for server rooms, Stofega said. An attacker who gets access to a server can wreak havoc, and the results could be especially devastating if that server is running a company's phone calls, he said.
http://www.computerworld.com.au/pp.php?id=126733506&fp=16&fpid=0
Read The Full Thread: Security: Lack of response from customercare...
• What's the procedure to cancel the service, just call the main number and say i
• Anyone taking the time and energy to rebuild and listen to my conversations is
• That's where you're mistaken, if vonage is your only service, or you mistakenly
• Like I said. While this may be a concern for you, anyone that expends the time and
• Maybe Maxwell Smart could loan you "The Cone Of Silence" :-D
Seriously, if security
• True, and I'd be willing to pay more money. The thing that really pisses me off is
• As far as I know it is secure...You have SIP which initiates the call and then RTP
• :twisted: I'm busily surrounding my house with lead and searching for hidden
• If you'd like, i can provide a step by step demonstration of how easy it is utilizing
• If you'd like, I can take you to the cross-box and show you how to put your butt-set
LuisPR posted "Industry group sets out to make VOIP secure
Stephen Lawson, IDG News Service
29/03/2005" on 03/28/2005 |
|
|
| |
| Vonage Service Plans |
| | |
| Vonage VoIP Members |
|
 Members
 New Dave159
 New Today 0
 Yesterday 3
 Total 64291
 Who Is On Site
 Visitors 82
 Members 0
 Total 82
Vonage VoIP Forum Members:
Login Here
Not a Member? You can Register Here
As a registered member you will have access to the VoIP Speed Test, Vonage Service Announcements and post comments in the
Vonage VoIP Forums | | | |
| Vonage Stock Price |
|
Value: 1.70
Change:  -0.03
Up to 15 Minute Delay | | | |
| Site Search |
| | |
|
|
Vonage VoIP Phone Service is redefining communications by offering consumers
& small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 0.34 Seconds and 279 Pages In The Last 60 Seconds
The Vonage VoIP Forum
|
