VoIP Vulnerabilities Still Apparent
434
Communications > VOIP
Mar 1, 2007
Andrew Johnson
VoIP Vulnerabilities Still Apparent
With the use of Voice Over Internet Protocol (VoIP) by all reports rapidly expanding, several recent cases have exposed serious vulnerabilities with the service. However fraud is an everyday occurrence so I for one wouldn?t base my decision solely on these events.
As per previous articles I have written and various on my ?About VoIP Information? website, security vulnerabilities for VoIP do exist and have been and continue to be seriously examined and worked through by industry. However two recent cases act as a reminder that all holes have not been closed.
In Australia it has been reported that a very public VoIP provider Engin had it?s Customer Relationship Management (CRM) software cracked by a hacker who publicly exposed how to obtain details of other customer?s orders in a post on the broadband site Whirlpool. Engin reportedly resolved the problem the next morning before any advantage was gained.
Engin appeared very honest and forthright admitting the problem and fixes that would be put in place with blame attributed to a third party programming consultancy responsible for programming of the CRM. Despite credit card details apparently not recorded in the area that became accessible, it does highlight the ease at which confidential personal information can be accessed, not something that is usually considered a security problem related to VoIP.
In the very public case two arrests have been made in early June for breaking into a New York companies network and spoofing VoIP traffic to its service provider. Wholesale phone connections were then offered at discount rates in a pseudo-service provider manner with a resultant 100% profit margin for the fraudsters.
TMCnet Executive Editor Robert Lui reported that one security expert advised the problem could have been easily adverted. It is suggested that multiple security products are required for securing VoIP networks which to some degree is in line with the layered or defence in depth security principle ie more layers of security making it more difficult to get through.
Despite these two reported cases and significant discussion and reporting about a diverse range of security considerations and concerns, it must be remembered that fraud is part of everyday life and regardless of how many checks and balances are put in place, a determined criminal will eventually be successful. Such is the case with credit cards for example, passports and other identification documents. The message in my view to take away is review the service providers performance and virtually by the numbers game, assuming all advisable security precautions are adhered to, it would be unlucky to be a victim of hacking.
The Author has an Associate Diploma in Electronic Engineering. For further information, books or VoIP items, please visit All About Voice Over Internet Protocol The Author has an Associate Diploma in Electronic Engineering. For further information, books or VoIP items, please visit All About Voice Over Internet Protocol
As per previous articles I have written and various on my ?About VoIP Information? website, security vulnerabilities for VoIP do exist and have been and continue to be seriously examined and worked through by industry. However two recent cases act as a reminder that all holes have not been closed.
In Australia it has been reported that a very public VoIP provider Engin had it?s Customer Relationship Management (CRM) software cracked by a hacker who publicly exposed how to obtain details of other customer?s orders in a post on the broadband site Whirlpool. Engin reportedly resolved the problem the next morning before any advantage was gained.
Engin appeared very honest and forthright admitting the problem and fixes that would be put in place with blame attributed to a third party programming consultancy responsible for programming of the CRM. Despite credit card details apparently not recorded in the area that became accessible, it does highlight the ease at which confidential personal information can be accessed, not something that is usually considered a security problem related to VoIP.
In the very public case two arrests have been made in early June for breaking into a New York companies network and spoofing VoIP traffic to its service provider. Wholesale phone connections were then offered at discount rates in a pseudo-service provider manner with a resultant 100% profit margin for the fraudsters.
TMCnet Executive Editor Robert Lui reported that one security expert advised the problem could have been easily adverted. It is suggested that multiple security products are required for securing VoIP networks which to some degree is in line with the layered or defence in depth security principle ie more layers of security making it more difficult to get through.
Despite these two reported cases and significant discussion and reporting about a diverse range of security considerations and concerns, it must be remembered that fraud is part of everyday life and regardless of how many checks and balances are put in place, a determined criminal will eventually be successful. Such is the case with credit cards for example, passports and other identification documents. The message in my view to take away is review the service providers performance and virtually by the numbers game, assuming all advisable security precautions are adhered to, it would be unlucky to be a victim of hacking.
The Author has an Associate Diploma in Electronic Engineering. For further information, books or VoIP items, please visit All About Voice Over Internet Protocol The Author has an Associate Diploma in Electronic Engineering. For further information, books or VoIP items, please visit All About Voice Over Internet Protocol
Write a Review
Add to My Favorite
Refer it to Friend
Report Article
Other links owned by this user
Before signing up to a VoIP provider you need to do your homework. Sure you learn what VoIP is about and you research which provider will be the best for you, but don?t make the vital error of not considering your current fixed line
Category:
It could be quite intimidating for the new person to Voice Over Internet Protocol (VoIP) with most articles or literature using significant amounts of jargon. This article will provide an overview of the terminology used in the VoIP arena but will not go
Category:
With the use of Voice Over Internet Protocol (VoIP) by all reports rapidly expanding, several recent cases have exposed serious vulnerabilities with the service. However fraud is an everyday occurrence so I for one wouldn?t base my decision solely on
Category:
Have you not even heard the expression VoIP or Voice over internet protocol. It provides the ability to make phone calls over the internet at very low cost or even free. But what is it all about and how do you use it? VoIP has several
Category:
Other links at Communications > VOIP
If you plan to print your own barcode, you will need quality barcode oftware. There are many different barcode oftware product on the market. Some, however, are better
Category:
Many people have heard of VoIP or Voice Over Internet Protocol, but not many know about the benefits of VoIP. In short, VoIP is a technology that transmits audio files as data over the Internet to another computer or a VoIP phone or a standard
Category:
Technology and its advent is a topic about which one living in e present world can go and go and on, but just like e appetite of technology even is topic can never end. Day and day technology has made new discoveries at bring about a change in
Category:
There is no doubt that VoIP (Voice over Internet Protocol) has many advantages over traditional calling, but one advantage that might not seem obvious at first is the flexibility that VoIP possesses. For the majority of people, the first
Category:
There are hundreds of choices to choose from in the internet telephone market, and every person has different telephone needs. So how do you know which VoIP is right for you? I will break down the varying needs of the internet phone consumer, and
Category:
Site Sponsor
Directory Statistics
Articles: 68214
Categories: 501
Yahoo Entertainment
