Business VoIP

Smart Data Centers

TMCnet - The World's Largest Communications and Technology Community
TMC Launches New Sites ::  NGC  |  4GWE  |  Green Tech  |  Satellite  |  IT |  ITEXPO  |  Healthcare  |  Smart Grid  |  M2M  |  Smart Products  |  AstriCon News  |  SATCON News
Share
Business VoIPBusiness VoIPBusiness VoIP
August 03, 2007

Security Professionals Outline the Risks of VoIP Hacking



By Brian Solomon
TMCnet Web Editor

As VoIP gains nationwide acceptance and becomes a mainstream communications technology, security and the risks of hacking are also becoming major issues. That’s the point that security professionals at the Black Hat convention in Las Vegas were trying to drive home earlier this week, even going so far as to demonstrate onstage how VoIP services can be hacked by criminals.

 
In the beginning, the main issues with VoIP were reliability, functionality and cost. But now that VoIP seems to be on the way to replacing the traditional telephone system, it has become more enticing to criminals—and the security threat has become a cause for concern.
 
Security threats in VoIP can take several forms. There is the most common: identity and service theft. Encryption is not yet common in SIP, and that can open up user credentials to theft. There are viruses and malware, which can infiltrate VoIP just like any other Internet application. A Denial of Service (DoS) attack involves overloading networks and consuming bandwidth so that users lose connectivity. Spam will also become an issue as the technology grows more mainstream, clogging voicemail and requiring better management tools. Hackers can even tamper with a call in progress.
 
“VoIP is about convergence. The idea is that you save money and resources and time,” said one of the Black Hat presenters, Next Generation Security Software’s senior security consultant Barrie Dempster. “But convergent systems give you more avenues of attack, more ways in. It’s not a secure environment.”
 
Businesses are being increasingly hit by VoIP attacks, including several companies in the past year that suffered from “toll fraud”, a scheme in which hackers sell thousands of dollars worth of long-distance minutes by hacking into a company’s VoIP network.
 
Brian Solomon is a Web Editor for TMCnet.com

Discussions:
 

Participate in the Community:
Add Your Thoughts and Comments Now
 
 
By  
TMCnet
 
Sign up for real-time alerts on Smart Data Centers