VoIP Makes List of Top 20 Internet Attack Targets

Note: Like Duh... 
 
VoIP systems are highly susceptable to outside attacks, according to the SANS Institutes's 2006 list of Top-20 Internet Security Attack Targets . The list, released this week, is an annual breakdown of the the Internet's most attacked targets, and covers everything from operating systems and network devices to security policies.  

As the technology has grown in popularity over the past few years, VoIP attacks have multiplied exponentially. The security of call proxy, media servers and VoIP phones are specifically called into question in the report, which mentions specific products previously found vulnerable to attacks like Cisco Unified Call Manager and Asterisk. While known flaws are usually addressed with vendor released security patches, many VoIP customers remain unaware that they are targets until their systems are compromised, and will neglect to seek out fixes.

Hackers who go after VoIP systems can gain access over servers and VoIP phones, either crashing the systems completely or gaining total control. With control, the intruders can then carry out any number of illicit tasks including phishing scams, hijacking one side of a conversation, stealing minutes, eavesdropping, toll fraud and denial-of-service. 
 

Click Here to Continue Reading "VoIP Makes List of Top 20 Internet Attack Targets"

« Microsoft and MetroFi Team Up on Free Wireless Internet in Portland, Ore. | Main | Asterisk 1.4 GUI Screenshots »