Sign up
 Vonage  

       
 
Vonage Forum Menu

Vonage Forums
Vonage VoIP Forum
tplink Posted:
Im trying to add
my HT802 vonage
adapter to my home
network. I
currently have
...

In The Forum:
Hard Wiring - Installation
Topic:
Vonage behind switch
On Dec 05, 2016 at 06:35:11

MichaelMub Posted:
PORN...
In The Forum:
Vonage
Topic:
The best pron
On Dec 04, 2016 at 10:22:56

Dwightkaw Posted:
kredyt bez
zaświadcze
24; kredyt bez
zaświadcze
24; o dochodach
...

In The Forum:
Vonage
Topic:
kredyt bez zaświadczeń
On Dec 03, 2016 at 03:27:10

Kevingrarl Posted:
Су
95;ас&
#1085;иl
1;
пі
76;пр&
#1080;&
...

In The Forum:
Vonage
Topic:
Сучас&
On Dec 02, 2016 at 12:51:38

IsaawUnace Posted:
does cialis work
as well as cialis
add.cgi buy
cialis cialis
the team <a
...

In The Forum:
Vonage
Topic:
Condition good pill instead of ed
On Dec 01, 2016 at 11:11:59

MatrickVop Posted:
buy cialis today
columbus oh
generic cialis
buy cialis online
registered users
...

In The Forum:
Vonage
Topic:
Classify miserly pills no means
On Nov 28, 2016 at 10:42:47

dracossumo Posted:
Ко
84;па&
#1085;иn
3; Tritel
пр
77;до
...

In The Forum:
Vonage
Topic:
&#1048;&#1085;&#1090;&#1077;&#1088;&
On Nov 27, 2016 at 23:00:39

DWSupport Posted:
After recent
Vonage update that
took place on the
4th and 5th of
Nov. E-mails with
...

In The Forum:
Vonage
Topic:
Voicemail Not Forwarding to Outlook Accounts
On Nov 10, 2016 at 12:23:26

peterlee Posted:
Had a call from a
Hospital in Ajax,
Ontario to my home
in
Scarborough, Onta
rio
...

In The Forum:
Vonage Canada
Topic:
Hospital Incoming call unable to connect
On Nov 08, 2016 at 11:59:50

TELLDOUG Posted:
I am looking for a
product that will
make my phone ring
louder so I can
hear using
...

In The Forum:
Vonage
Topic:
Looking for a ringer ameliorate
On Oct 26, 2016 at 09:21:30


Vonage VoIP Forums

Vonage In The News
Vonage Holdings Corp. Reports Fourth Quarter and Full Year 2013 Results

Carolyn Katz Elected to Board of Directors of Vonage Holdings Corp.

Syndication

Vonage Customer Reviews
Vonage vs. Time Warner Cable SoCal
Vonage vs. Time Warner Cable SoCal



Vonage UK Review
Vonage UK Review



Vonage Pros and Cons for 2006
Vonage Pros and Cons for 2006



Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review
Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review



Salt Lake City: impressions after several months
Salt Lake City: impressions after several months




Vonage Reviews

Voice Over IP Security


Vonage In Print News

Voice Over IP Security

March 18, 2004

By Matthew Tanase

Introduction

As information technology professionals, we are constantly bombarded with new products and ideas claiming to be revolutionary. And for a brief amount of time, a few of these technologies seem to grab all the headlines, in trade magazines, on tech sites and at industry conferences. The technology darling of late is VoIP. Short for Voice over IP, you've likely come across it, probably considered it and possibly deployed it. The hype, deservedly so, is reaching a crescendo as excess bandwidth, improved software and better hardware drive this technology forward. For the right situations, it's a truly wonderful solution. Lower phone bills, virtual offices, centralized management and rapid deployment are just a few of the benefits. And the success of companies such as Vonage and Skype, combined with the growth of wireless networks will move this technology from enterprises to smaller businesses and the SOHO market. Unfortunately, new technologies bring new security concerns. Suddenly, you have the burden of protecting two infrastructures - voice and data. This article will introduce voice over IP concepts and the new security concerns they raise.



Is it Better?

Before jumping into the security factors of a voice over IP network, let's examine the rationale behind it. The traditional telephone network, known as POTS (plain old telephone service) or the PSTN (public switched telephone network), served us well for many years. Unfortunately, it was costly, managed by only a few companies and inefficient. Each voice call over POTS uses a unique connection, allotted 64K of bandwidth. We're all familiar with a T1 connection, which has 24 channels and 1.5M of bandwidth (64K *24). In reality, a quality voice call on one of these channels requires a fraction of the 64K granted to it by POTS. Moreover, a silent moment, or lapses in speech still consume the 64K. Voip deployments capitalize on the inefficiency of this design. The analog voice signal is digitized, compressed, chunked into packets and sent over a data network. Advanced compression algorithms reduce the bandwidth necessary for a quality voice call to a fraction of the 64K required by POTS. The silence and background noise transmission of POTS can be eliminated as well (although some deployments build this feature in to comfort end users!). As if the bandwidth savings weren't enough, Voip deployments also reduce cost and enhance scalability by employing standard data networking components (routers, network switches), instead of expensive, complicated telephone switches. Now the same team handling the data network can manage a voice network - great news for all of you overworked IT staffers.

How Does It Work?

The process of Voip is dependent on signaling and media transport. A signaling protocol, such as SIP (session initiation protocol), performs the legwork: locating users, call parameters, modifications and building or ending a session. Media transport protocols, like RTP (real time transport protocol) handle the voice portion of a call: digitizing, encoding and ordering. Networking protocols, such as IP, are wrapped around the Voip packets when they are transmitted to the proper servers.

Voip calls can take place between LANs or on WANs, as is the case with internal calls on a corporate network. If a Voip user wishes to call a destination on POTS, a special gateway is used. These devices act as connectors between the data network and the SS7 network used by POTS. They translate the incoming data into a format the recipient, be it IP or SS7, can understand.

Onto Security

With an understanding of Voip technology and its benefits in place, let's consider the security ramifications. In the process of saving money and increasing efficiency, two crucial portions of any infrastructure, voice and data, were combined. Suddenly, an IT staff is not responsible for securing only standard servers (database, mail, web), workstations and routers. As if these data security concerns weren't enough, Voip servers acting as gateways, special routers, phones, new protocols and operating systems are now thrown into the mix. The burden of voice and telecommunications security has been shifted from the carrier to the IT team. It has moved from an obscure PSTN, to an IP network every cracker is familiar with. Let's examine the risks and how you can mitigate them.

What Are The Threats?

Unfortunately, there are numerous threats to a Voip network, many of which aren't obvious to newcomers. The networking devices, the servers and their operating systems, the protocols, the phones and their software are all vulnerable.

Information about a call is almost as valuable as the voice content. For instance, a compromised signaling server used to setup and manage calls, might yield the following: a list of incoming and out going calls, their durations and parameters. Using just this information, an attacker could map all of the calls on your network, creating complex conversation records and user tracking.

The conversation itself is also at risk and the most obvious target of a Voip network. By breaching a key part of the infrastructure, such as a Voip gateway, an attacker could capture and reassemble packets in order to eavesdrop on the conversation. Or even more nefariously, record everything, and replay all conversations occurring on your network. On the PSTN, this would be an impressive feat, since few are skilled enough on or have access to the huge switches managing calls. That's obviously not the case on a data network, as legions of script kiddies prove every day. And if your Voip packets traverse the Internet to reach a destination, a number of attackers have a shot at your voice data.

The calls are also vulnerable to hijacking or a man in the middle attack. In such a scenario, an attacker would intercept a connection and modify call parameters. This is an especially scary attack, since the participants likely wouldn't notice a change. The ramifications include spoofing or identity theft and call redirection, making data integrity a major risk.

The availability of the Voip network is also a major concern. On the PSTN, availability is rarely a problem. Attackers would need to overload some very large circuits or cut a connection. It's much easier to thwart a Voip network. All of us are familiar with the crippling effects of distributed denial of service attacks. If directed at key points of your network, it would disrupt your ability to communicate via voice or data.

The phones and servers are targets themselves. Although as a whole they mimic phones, they are, at the core, computers with software. Obviously, this software is vulnerable to the same types of bugs and exploits that hamper every operating system and application available today. Code could be inserted to perform any number of malicious actions.

Voip Security And Defense

How anticlimactic. I point out the wonders of voice over IP and follow them up with major security problems! Fortunately, the situation is not without remedy. The risks outlined above, while specific to VoIP, are all issues we deal with on regular IP networks. Unfortunately, in the initial rollouts and designs of voice related hardware, software and protocols, security was not a major concern. But that's usually the case with every new technology, a fact that we are all working to change. Let's examine some of the tried and true workarounds that can alleviate the threats outlined above.

The first thing that should come to mind reading about Voip is encryption. While it's not easy to capture, reassemble and decode voice packets, it can definitely be done. Encryption is the only way to prevent such an attack. Unfortunately, it adds overhead, eating up or eliminating altogether the bandwidth reductions from traditional voice calls. This, in turn, affects throughput and performance - which can introduce dreaded jitter into the call. So what can you do? There are multiple encryption options - VPN setups, the IPSec protocol and other protocols such as SRTP (secure RTP- though it does not offer any authentication features like VPNs, it does encrypt voice packet payloads). The key however, is to choose a fast, efficient encryption algorithm and employ a dedicated encryption processor. This should alleviate any performance concerns. Another option would be strict QoS standards for Voip packets on your network and powerful hardware. Such QoS requirements will ensure that voice is always handled in a timely manner, reducing the chance of degraded quality.

Next, as should be expected, would be the process of securing all elements of a Voip network. You'll be dealing with call servers, routers, switches (you're not still using a hub that can be sniffed!), workstations and phones. You need to perform regular assessments on each of these devices to ensure they are in line with your security demands. The servers should have minimal jobs running and only the necessary ports open. The routers and switches should be configured properly, with access control lists and filters in place. All of the devices should be up to date in terms of patches and upgrades. These are the same types of precautions you would take when adding new elements to your existing data network, just extend the process to the Voip portion as well.

As mentioned, the availability of your Voip network is a concern as well. Unlike POTS, a power loss will bring your network down -- so make sure prolonged redundancy options are in place. DdoS attacks are always difficult to defend against. Aside from proper router configurations, make sure you have an escalation process in place with your IP carrier, since many times they are needed to assist. Remember, such an attack would not only halt your data services, but voice as well.

Lastly, you can employ a firewall and an IDS to help protect your voice network. A Voip firewall is a difficult beast to manage due to the ever-changing requirements. Call servers are constantly opening and closing ports for new connections. This dynamic element makes rule management difficult, even on stateful devices. But the costs are far outweighed by the benefits, so spend some time perfecting your access controls. An IDS can assist in monitoring the network for any anomalies or potential abuses. Early warnings are key to preventing larger attacks.

Conclusion

As evidenced by the explosive growth of the voice over IP market, this technology will work its way into your businesses and networks. It carries with it however, the new burden of voice security. Careful planning and architecture, borrowed from our data security experiences, can help mitigate the risks and amplify the returns.



 
Vonage Service Plans


Vonage VoIP Members
Members List Members
New rickype69
New Today 6
Yesterday 8
Total 99015

Who Is On Site
Visitors 105
Members 0
Total 105


Vonage VoIP Forum Members:
Login Here
Not a Member? You can Register Here
As a registered member you will have access to the VoIP Speed Test, Vonage Service Announcements and post comments in the
Vonage VoIP Forums

Vonage Stock Price
Value: 6.90
Change:   N/A
Up to 15 Minute Delay

Site Search
 

Social Bookmarks
 Printer Friendly Printer Friendly








†AK and HI residents pay $29.95 shipping. ††Limited time offer. Valid for residents of the United States (&DC), 18 years or older, who open new accounts. Offer good while supplies last and only on new account activations. One kit per account/household. Offer cannot be combined with any other discounts, promotions or plans and is not applicable to past purchases. Good while supplies last. Allow up to 2 weeks for shipping. Other restrictions may apply.

1Unlimited calling and other services for all residential plans are based on normal residential, personal, non-commercial use. A combination of factors is used to determine abnormal use, including but not limited to: the number of unique numbers called, calls forwarded, minutes used and other factors. Subject to our Reasonable Use Policy and Terms of Service.

2Shipping and activation fees waived with 1-year agreement. An Early Termination Fee (with periodic pro-rated reductions) applies if service is terminated before the end of the first 12 months. Additional restrictions may apply. See Terms of Service for details.

HIGH SPEED INTERNET REQUIRED. †VALID FOR NEW LINES ONLY. RATES EXCLUDE INTERNET SERVICE, SURCHARGES, FEES AND TAXES. DEVICE MAY BE REFURBISHED. If you subscribe to plans with monthly minutes allotments, all call minutes placed from both from your home and registered ExtensionsTM phones will count toward your monthly minutes allotment. ExtensionsTM calls made from mobiles use airtime and may incur surcharges, depending on your mobile plan. Alarms, TTY and other systems may not be compatible. Vonage 911 service operates differently than traditional 911. See www.vonage.com/911 for details.

** Certain call types excluded.

www.vonage-forum.com is not an official Vonage support website & is independently operated.
All logos and trademarks are property of their respective owners. All comments are property of their posters.
All other www.vonage-forum.com content is © Copyright 2002 - 2013 by 4Sight Media LLC.

Thinking of signing up for Vonage but have questions?
Business and Residential customers can call Toll Free 24 hours a day at: 1-888-692-8074
No Vonage Promotion Code or Coupon Codes are required at www.vonage.com to receive any special,
best Vonage cheap deals, free sign up offers or discounts.

[ | | | | | ]

Vonage Forum Site Maps

Vonage | VoIP Forum | How VoIP Works | Wiring and Installation Page Two | International Rate Plans 2 | Internet Phone
Promotion | Vonage Review | VoIP | Broadband Phone | Free Month | Rebate | Vonnage | Vontage | VoIP | Phone Service
Phone | llamadas ilimitadas a Mexico | Latest News | VoIP Acronyms | Deal | Philippines Globe Phone | Site Maps

The Vonage Forum provides the Vonage sign up Best Offer Promotion Deal.
If you are considering signing up for Vonage and have found our Vonage News, Customer Reviews, Forums
& all other parts of this site useful, please use our Vonage Sign up page.


Vonage VoIP Phone Service is redefining communications by offering consumers
& small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 0.65 Seconds and 537 Pages In The Last 60 Seconds
The Vonage VoIP Forum