VOIP Security Resources

How to Protect Your VoIP Network from Attacks

Before you deploy VoIP, however, you need to be aware of the security risks and the countermeasures that you can take.Security is important in every context, but especially when you're replacing the world's oldest, largest and most resilient and available communications network. While no individual security measure will eliminate attacks against VoIP deployments entirely, a layered approach can meaningfully reduce the probability that attacks will succeed. More...

IP Telephony Security, Part 1: Threats to Subscribers

IP networks are now used to handle an increasing number of voice calls. While the bulk of this telephone traffic is currently enterprise, consumers are dabbling in IP Telephony (alias Voice over IP, VoIP). As products are commoditized and public services like Vonage mature, new voice-data applications will be offered, encouraging even broader adoption. As a VOIP customer or user, you need to understand how VOIP differs from plain old telephone service. More...

IP Telephony Security, Part II: Threats to Operators

Part I of this series explains how IP networks are used to handle an increasing number of voice calls. As products are commoditized, new applications appear, and more public IPT "carriers" come online, even broader adoption is inevitable. The dark side of the convergence of voice, IP, and wireless networking also presents formidable threats to VOIP network operators, both public and private. More...

Is VOIP hacking heating up? What do disclosure lists indicate?

It's unusual to see three SIP-related posts on BugTraq in the span of less than a week. Perhaps it's an anomaly, but last week, exploit code for two vulnerabilities and a new SIP war dialing tool were announced. These posts suggest that there are enough SIP UAs to make attacking *interesting* and that traditional scanning and information gathering tools can and are being extended to probe SIP-based applications. More...

Books

Hacking VOIP Exposed
Understanding Voice over Internet Protocol Security

Forums and Consortia

VOIP Security Alliance
Voice Over Packet Security
The Defense Switched Network (DSN) DISA
VOIP Security Research at the University of Hamburg

Security Standards and Works in Progress

RFC 3093, Firewall Enhancement Protocol
RFC 3323, A Privacy Mechanism for the Session Initiation Protocol
RFC 3324, Short Term Requirements for Network Asserted Identity
RFC 3325, Private Extensions to the Session Initiation Protocol (SIP) for Asserted Identity within Trusted Networks
RFC 3711, The Secure Real-time Transport Protocol (SRTP)
RFC 3725, Best Current Practices for Third Party Call Control (3pcc) in the Session Initiation Protocol (SIP)
RFC 3760, Securely Available Credentials (SACRED) - Credential Server Framework
RFC 3830, MIKEY: Multimedia Internet KEYing

Secure SIP

Secure SIP protects VoIP traffic by Michael Ward

SKYPE Security

SKYPE: Free Internet Telephony that just works
Skype Security Evaluation by Tom Berson
Skype uncovered: Security study of Skype by Desclaux Fabrice

Attacks and Threats

Eavesdropping an IP Telephony Call by Tom Long
Voices... I hear voices! by Ivan Arce
VOIP Security Threats Explained 
Two attacks against VoIP by Peter Thermos
The Value of SIP Security by Mark Collier
Security Concerns with VOIP by Weiss
Security Analysis: Traditional Telephony and IP Telephony by Alan Klein
VoIP Security Challenges In Enterprise And Service Provider Networks by Steve Bakke
The RTP DOS Attack and its Prevention by Jonathan Rosenberg
IPT: Is Your VOIP Secure? at Communications Convergence
VOIP spam - it's coming by Peter Cochrane
Security Considerations when Implementing IP Telephony in Enterprise Networks at Ericcson
IP Telephony in Enterprise Environments and Security Issues by Brennan Reynolds
How VoIP is changing the network security equation by Philip Bednarz
Modem Passthrough over Voice over IP at Cisco Systems
VOIP and Security Greg Tucker
Voice over IP Exposed Larry Stevens
Experts: VOIP Attacks Are Tough to Stop at Dark Reading
The myths and realities of VoIP security Zeus Kerravala
Hacking VOIP Exposed

SPIT, SPAM and Vishing

SPAM and DOS headed VOIP's way by Susan Kushinskas
Net phone customers brace for VOIP spam by Ben Charny
Don't SPIT on VOIP by Susan Kuchinskas
Move over SPAM, make room for SPIT NewScientist.com news service
What is Voice Phishing? 
Mark Collier's VOIP Phishing Blogs

VOIP and Wireless (WiSIP, VOWLAN)

VoIP Vulnerabilities and DoS Delusions by Andy Dornan
Overcoming QoS, Security Issues in VoWLAN Designs by Ravi Kodavarti
Adding Voice Service to a WLAN Network: Protecting QoS and Data Security at Colubris
Beyond Interoperability: Network Security: as a Voice over IP (VoIP) Enabler

Defenses and Countermeasures

A VoIP security plan of attack by Joel Snyder
IP Telephony changes security equation Mathias Thurmon
SIP, Security and Session Controllers Newport Networks
Breaking Through IP Telephony Ed Meir
VOIP Security: Not an afterthought by Douglas C. Sicker and Tom Lookabaugh
Configuring High Availability in a SIP-Based Network
Security Considerations for Voice over IP Systems at NIST
Next Generation Networks and Security Peter Thermos and Guy Hadsall
VOIP Security Technical Implementation Guide Defense Information Security Agency
VOIP Security - A Layered Approach
Often Overlooked: PBX and Voice Security in a Networked World by Chris Herrera
VOIP: Don't overlook security
The value of VOIP security by Mark Collier
Securing IP Telephony by Tony Rybczynski
Defense in Depth for VOIP networks by Dave Roberts
Security in SIP-Based Networks at Cisco Systems
How VoIP is changing the network security equation by EE Times
STOP DoS Attacks against your VoIP by Tom Lancaster
VOIP Security Implementation by Debbie Greenstreet and Sophia Scoggins
Securing The IP Telephony Perimeter David Greenfield
Secure IP Telephony For The Enterprise at Check Point Technologies
Voice over IP Security Matt Tanase
VoIP Security: Loose IPs Sink Ships Ray Horak
Security for service provider VoIP networks at Nortel Networks
VOIP Security - Firewall Options
Five VoIP security recommendations Gerhard Eschelbeck
SIP Firewalls Tom Lancaster
Avoiding a VoIP security 'judgment day'Eric B. Parizo
Encrypting VoIP traffic: How and why
Employ fuzzing to test VoIP security Benjamin Vigil
VoIP Security - Best Practices Outline at Juniper Networks
Privacy Guru Locks Down VOIP Phil Zimmerman on PGP VoIP
VoIP security safeguards -- they may be there already VoIP News
VoIP tightens security against fuzzing, zombies, malicious intruders

Comments

Feed You can follow this conversation by subscribing to the comment feed for this post.

Verify your Comment

Previewing your Comment

Posted by:  | 

This is only a preview. Your comment has not yet been posted.

Working...
Your comment could not be posted. Error type:
Your comment has been saved. Comments are moderated and will not appear until approved by the author. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.

Working...

Post a comment

Comments are moderated, and will not appear until the author has approved them.

Your Information

(Name is required. Email address will not be displayed with the comment.)

Find me on Mastodon and Facebook

Spotlight Posts

  • Interisle's Phishing Landscape 2024 is here
    Our Interisle team today announced the publication of an industry report, Phishing Landscape 2024, A Study of the Scope and Distribution of Phishing. Interisle’s fourth annual study examines nearly four million phishing reports collected from May 2023 to April 2024 and provides historical measurements using over 15 million phishing reports collected at the Cybercrime Information Center over a four year period. Findings from the study: • The total number of phishing attacks grew to ~1.9 million incidents worldwide. • Phishing attacks hosted at subdomain providers increased by 450,000+ reported names, representing 24% of all phishing attacks. • The use of...
  • Malware Trends, January - March, 2024 posted at the Cybercrime Information Center
    2024 began with a rise in domain names reported for hosting malware unlike any we have seen since we began measuring malware attacks in 2021. The 1Q2024 Top 20 TLDs included 10 new gTLDs, 6 ccTLDs, and 4 legacy gTLDs. Only three TLDs remained in the top 5 TLDs (COM, NET, INFO) from the prior quarter. The ORG and BR TLDs were replaced by SHOP (over 3,000% increase) and TOP (over 700% increase). All but one registrar in 1Q2024’s Top 20 registrar ranking showed increases of 100% or more. Several registrars had 4- and 5-figure percentage increases in domains reported....
  • Malware Trends, January - March, 2024 posted at the Cybercrime Information Center
    2024 began with a rise in domain names reported for hosting malware unlike any we have seen since we began measuring malware attacks in 2021. The 1Q2024 Top 20 TLDs included 10 new gTLDs, 6 ccTLDs, and 4 legacy gTLDs. Only three TLDs remained in the top 5 TLDs (COM, NET, INFO) from the prior quarter. The ORG and BR TLDs were replaced by SHOP (over 3,000% increase) and TOP (over 700% increase). All but one registrar in 1Q2024’s Top 20 registrar ranking showed increases of 100% or more. Several registrars had 4- and 5-figure percentage increases in domains reported....
  • Spotlight: Impersonation phishing using exact match hostnames
    Phishers have long embedded exact matches of brands in domain names that they register for phishing. Company, service, or product names in domains continue to deceive less technically savvy members of society. Phishers are increasingly using exact match strings to compose hostnames at free web sites for phishing. My Interisle colleagues and I looked at the web site domains and subdomains used in phishing attacks from November 2023 through January 2024. During that period, impersonation attacks against two brands stood out: United States Postal Service (USPS) and Facebook. Looking closely at these two brands, we are able to illustrate how...
  • Cybercrime supply chain interviews with Spamhaus Team
    The Spamhaus team recently interviewed me to learn more about Interisle's recent study, Cybercrime Supply Chain 2023, where we examine the supply chains used by cybercriminals to acquire resources for malware, spam, and phishing attacks. In Trends, policy and cheap TLDs - an interview with Dave Piscitello (Part 1), we dive into some of the study's key findings: Nearly 5 million domain names identified as resources for cybercrime. Over 1 million new gTLD domain names reported for spam activity. Over 500,000 subdomain hostnames reported as cybercrime resources at 229 subdomain resellers. The United States, China, India, Australia, and Hong Kong...

Search

My Photo

Categories