VoIP security has been called in question recently, though there is little evidence to indicate that VoIP security is any less than conventional telephony systems.
VoIP voice data is transmitted via a packet-switched data network using IP. VoIP systems can carry a significant higher number of calls, and very much faster, than traditional PSTN networks due to compression of the voice packets, modern broadband technology and a number of other gateway developments which have reduced the previous packet delivery problems to an extent that the protocol is now a viable mainstream telephony solution to most business needs.
VoIP security should therefore be shown to be at least as effective as that of traditional telephone systems.
There is actually very little difference between VoIP security and that required for any other type of data transmission system. Look on it the same as you do your email system. The same as your office LAN if you have one. You probably have a system in operation whereby only authorized personnel can use certain aspects of the network. VoIP security can, and do, use the same techniques.
However, having said that, let's have a look at potential weak points in VoIP security that budding hackers may see as good points of attack.
IP PBX CALL MANAGEMENT BOXES
PBX stands for Private Branch Exchange, and is piece of software running on a server. It's function is to deal with all the switches and connections involved in the telephone system. These can be attacked by hackers or viruses which could compromise sensitive data. VoIP security systems are designed with this risk in mind.
PBX equipment should be placed behind firewalls, locked down and regularly monitored for unwarranted intrusions using intrusion-detection software. It is also possible to put the server in a different domain from the rest of the system, making it much more difficult for intruders to reach. PBX security is a basic aspect of VoIP security systems
GATEWAYS AND DATA PACKETS
The gateway's job is to convert voice to data packets, transmit them then receive and convert the packets back into voice. These are a potential VoIP security risk in that thy can be hacked into unless there is an access-control system in place to prevent unauthorized people from accessing the system. VoIP calls should only be permitted to specific people, and most good VoIP security systems allow only authorized user to operate VoIP systems under password control.
The data packets themselves can be hacked into using data-sniffing techniques. This can be a serious VoIP security risk and packet sniffers, as they are often called, capture binary data passing through your network and can reroute it to a computer on another network for decoding into a readable form. In order to do this, the 'sniffers' has to be on the same network wire as the packet is using to reach its destination. The problem in installing an effective VoIP security system is that there is usually a lot of information passing at any one time, and the hacker has a higher probability of getting useful information than from a conventional telephone system.
Encrypting VoIP traffic and routing it through a virtual private network would reduce the VoIP security risk, and most corporate systems have multiple encryption layers for external messages. Internal security could be improved by running internal VoIP messages through this corporate network. Small businesses should seek the advice of their supplier, or of a security expert if they feel that they may be subject to such attacks.
However, VoIP security advisors can point small to medium companies in the right direction. Corporate VoIP security is generally not so much problem in that it is normally contracted out to expert advisers.
In the final analysis, however, there are no real differences between VoIP security and the normal security concerns associated with any data network service, such as normal office internet and email LANs. The security firewalls and restricted access to use, common on these systems, should suffice to deal with VoIP security
Got a Question? Ask.
Ask the community a question about this article:
Frequently Asked Questions
Are there any entirely IM or VoIP -based p2p ...
By: drabsv | 18-07-2008
Are there any entirely IM or VoIP -based p2p support services? That is services like Yedda, only that the communication happens in real time, on chat or via Skype?
I know of IRC software support rooms and http://qunu.com but I am looking for something more advanced, for instance a database where you can tag yor question (without writing it, tags alone), leave your IM details, take advantage of a tag-matching system like here on Yedda and wait to be contacted on your personal IM client.
What voip to get
By: Patrick davis | 23-06-2008
Considering broadband service and would like voip. After checking internet i am tossed between vonage and via talk. Would like to know what the experts think would be the best choice.. I have very limited phone time useage
Would Sky VoIP work on Nokia N series? If yes, how ...
By: Biboy | 04-06-2008
Would Sky VoIP work on Nokia N series? If yes, how can we obtain the proper SIP settings?
How to make calls to different countries using ...
By: Vansas | 13-05-2008
how to make calls to different countries using voip. what is the procedure to do so?
Best VOIP Phone Model to Buy?
By: TonyBrook | 27-04-2008
I am considering looking into a voip (voice over internet) phone system for easier contact with my family around the world. Can anyone suggest which would be the best model for me to look into??
what is the advantages of PSTN?
By: muna | 04-04-2008
what is the advantages of PSTN?
Q&A Powered by:
Latest Computers Articles
Get the Most Out of Your Nanny Spy Cameras - Use Them For Other Purposes!
By: Nahshon Roberts | 25/07/2008
Lest you think that nanny spy cameras are only good for spying on the nanny, think again. The term is another designation for hidden surveillance cameras, supposedly because these are now more commonly used to monitor childcare providers in an increasingly nanny-paranoid society.
Nanny spy cameras are usually...
Analyzing Consumer Electronics Devices
By: James Brown | 24/07/2008
Many consumers are drawn to consumer electronics because of the technology that makes each device perform its mission. While many consumers might not have a technical degree, many have a working knowledge of what the device is equipped with and the selling points of the device after they enter a...
Types of Consumer Electronics
By: James Brown | 24/07/2008
With so many updates and changes made to consumer electronics lately, some consumers are having a difficult time understanding what types of consumer electronics are most popular among middle class Americans and those who live on limited incomes where budget cuts made most consumer electronics seem unaffordable. Families across the...
Benefits of Unlocked Cellular Phones
By: Abe S. | 24/07/2008
You may not know much about your cellular phone other than that you cannot live without it! Your cell phone is your connection to the rest of the world and is a very important tool. Many cell phones are made to use a SIM card - a Subscriber...
How to Start a Business Selling Cell Phones
By: Abe S. | 24/07/2008
In today's unstable economy with reduced income and rising prices, everyone wants to save money if they can. Even if the economy were booming, saving money is always a wise choice. There is no shame in wanting to save as much money as possible when it comes to...
How Can I Work With Sybase Database Tools?
By: Patricia Stevens | 23/07/2008
To use a Sybase server, you are should have Netscape Enterprise Server. You cannot get an access to Sybase from Netscape FastTrack Server. Sybase has both one-line, and multiline drivers on some Unix-platforms. If Sybase has the multiline driver for the concrete Unix-machine, you are obliged to use LiveWire for...
Baselining--Stress Testing--Performance Testing--Oh My--Part TWO-Testing
By: Barry Koplowitz | 23/07/2008
This article is also available as a Podcast on "The ROOT Cause" available on iTunes. Written and Narrated by Barry Koplowitz.
This is the second of two articles discussing the topic of Test Environments and Testing Practices. The first one, "Baselining--Stress Testing--Performance Testing--Oh My--Part One--Environments," focused on proper testing environment design....
Page Yield / Cartridge Yield
By: Kwan Lo | 23/07/2008
Page yield is the number of pages that you can print with a printer cartridge. It is also known as cartridge yield. Many cartridge manufacturers use the terms "standard yield" or "high yield" to describe their printer cartridge but each cartridge should have a page yield value. It...
More from Peter Nisbet
Why Payday Loans Are a Good Emergency Cash Source
By: Peter Nisbet | 10/06/2008 | Finance
Payday loans are a good emergency cash source, especially for those with bad credit records and a poor credit score. For those it would otherwise be next to impossible for them to find emergency cash other than put themselves at the mercy of loan sharks with exorbitant interest rates, and...
A Guide to Emergency Cash Loans and Payday Loans
By: Peter Nisbet | 08/06/2008 | Finance
In this rapidly deteriorating economic climate, emergency cash loans and payday loans are becoming increasingly popular. The problem with these is that more and more people that have never required a short term unsecured loan in the past are finding a need to obtain one for that 'rainy day' for...
Website Promotion: How To Promote Your Website
By: Peter Nisbet | 05/06/2008 | Internet
There are many website promotion techniques, but the best way how to promote your website is by writing articles and submitting them to article directories. Article marketing, or bum marketing as it is sometimes called, is by far the most profitable way to get traffic to your site.
In fact the...
Legal Movie Download Sites: Do They Exist?
By: Peter Nisbet | 05/02/2008 | Art and Entertainment
Legal movie download sites seem very difficult if not impossible to find online, and I am not surprised that illegal downloads run at about 4 - 5 times the rate of legal downloads. Part of the reason for this is geographic limitation, whereby movie companies allow online sites to sell...
Amateur Blogs And Blogging For Profit
By: Peter Nisbet | 29/01/2008 | Internet
Most bloggers use amateur blogs as opposed to professionals, though I am not sure what a 'professional' blog is. If you are blogging for profit, whether as an amateur or professional, then you are best advised to run your blog from your own website. This involves downloading the blogging software...
SEO And LSI: How To Use Latent Semantic Indexing
By: Peter Nisbet | 28/01/2008 | Internet
People get worried when they hear about terms such as SEO and LSI, and when they try to find out how to use latent semantic indexing, they get even more worried when they get conflicting messages. On the one hand some say that LSI doesn't exist and therefore can't be...
Search Engine Marketing And Blogging Techniques
By: Peter Nisbet | 15/01/2008 | Internet
Search engines are the web's most used means of driving traffic to websites, and knowledge of search engine marketing is essential to anybody wanting to succeed online. However knowledge of blogging techniques is also instrumental in gaining you a high position in the search engine listings fore your chosen keyword.
Sure,...
Blogging For Profit And Traffic
By: Peter Nisbet | 07/01/2008 | Internet
Blogging for profit involves specific knowledge of how to make money online, although if you are only blogging for traffic then you are guaranteed that if you link your website to your blog.
In order to blog for profit, or to make money in other words, you need to understand the...
Computers 
