VoIP Insecurity

Voxilla's Eric Chamberlain has a piece out on the insecurities of VoIP.

His focus on the hardware side of things at the end is a starting point, but the network issues remain the core attack point. I'm sure when he returns Ken Camp and also Dan York can provide a lot more insight to the issue that Chamberlain has once again opened a door on.

Back in the summer, when I did a series of webinars for ZDNet the subject of VoIP Security was one that was emphasized. It may provide some added perspective, but what I'm really sure of now, as I was then, is the problem remains rooted in how secure the network is, not just your VoIP implementation.

Comments

[Dan York]

Andy,

Dustin Trammell commented over at "Voice of VOIPSA" on the original ComputerWeekly article shortly after it came out:

http://voipsa.org/blog/2006/11/10/voip-security-not-all-that-difficult/

and I haven't yet posted any other opinion. In the Voxilla post you point out, Eric Chamberlin takes that ComputerWeekly article to task for not focusing on better authentication for phones. There's a longer article on that that should be written - and probably what I'll do is write it with a trackback to here. Definitely a worthwhile discussion to have. Thanks for raising the profile.

Thanks,
Dan