VoIP Security and Insecurity

The IT Security and VoIP industries have met and what has emerged, while valuable and necessary, is not imaginative or robust. The whole area of “VoIP Security” has focused on protecting VoIP as an enterprise asset. And, yes VoIP is an important enterprise asset and it is worthy of protection, but there is more to worry over. SBC (Session Border Controller) vendors such as Acme Packet have focused on ensuring that only authorized VoIP users can place and receive calls to address DOS/DDOS attacks and Phreaking exploits. As you know, DOS and DDOS attacks are not unique to VoIP while VoIP can be harmed with lower levels of DOS/DDOS attacks because of VoIP’s sensitivity to latency and jitter. Phreaking is also not new, the TDM technology PBXs suffered from the same threat. So, SBCs are somewhat cool technology that solve yesterday’s (albeit still today’s) problems. Let’s stretch beyond well known threats and more into the domain of new threats that come with the new technology. This is what this blog is dedicated to addressing.