 |
 Voice Over IP 2 - Access to more VoIP technology information such as Voip for Cell Phone and SIP With Voice Over IP . The Voice Over IP 2 page also contains useful Voice Over IP related links.
|
|
|
|
|
Interception of Voice Over Internet looks at the security issues associated with voip and the concerns over ARP Spoofing, VoIP security and the interception of Voice Over Internet services.
|
Interception of Voice Over Internet
Although Voice Over IP has many advantages (primarily it's low cost) and is seen as the future in the telecommunications arena, there have also been concerns raised over it's security. With critics saying that the interception of Voice Over Internet data is a very real and serious problem.
A recent Continuity Central article revealed that research, by Secure Test, on the Cisco 7900 series VoIP phones have shown serious security concerns. With susceptibility to both DoS (denial of service) attacks and interception of Voice Over Internet issues, it is clear that transferring phone systems to an IP network opens them up to many of the same security concerns as Ethernet data networks. More worryingly, phone systems may be harder or even impossible to patch.
Like many IP devices Cisco's VoIP phones are vulnerable to ARP (Address Resolution Protocol) spoofing, allowing 'man-in-the-middle' attacks and including interception of Voice Over Internet data and packet injection. This means that any VoIP phone can be tapped by anyone else with a phone on the same network, any individual VoIP phone can be crashed easily and any VoIP network infrastructure is heavily vulnerable to DoS attacks.
|
|
|
|
A CommsDesign article explains that there are three types of security threats that are particularly problematic in a VoIP environment: eavesdropping, theft of services and denial of service. In the past someone had to physically attach to a telephone circuit with a wiretap to eavesdrop on a phone call. But interception of Voice Over Internet can take place anywhere in the network.
Both data and voice traffic share the same Ethernet cabling and server infrastructure. Using a standard software tool, one can download VoIP packets and play them back if unencrypted. Data encryption is the best defense against eavesdropping and the interception of Voice Over Internet calls. One of the options and benefits of VoIP based telephony is the ability to encrypt the digital data that represents the voice stream.
The most relevant links we could find, placed here free
 The Register - This article looks at Cisco's response to allegations that it's IP telephony equipment is vulnerable to communications interception. www.theregister.co.uk
CommsDesign - This article provides more information about the concerns of the interception of Voice Over Internet services. www.javvin.com
|
|
Back
Site written by Darren Smith & Richard Wedge