Re: VOIP Security

[Alvin Oga <alvin.sec () Virtual Linux-Consulting com>]

hi ya yan

> A client has inquired about voip security and would like us to assist in
> analyzing the risks in deploying voip through their organization.  Can
> anyone recommend some resources related to this area?
 
what kind of security ??

- talk in a foreign tongue ... instead of english and that solves lots
  of potential problems :-)

- or talk on an encrypted phone set

- for security of the voip gateway  ... its just another pc ...
        - all standard security practices should be applied and 
        applied even more rigourously since its more susceptable to 
        successful attacks as people might not see it as desktop pc or 
        mail/web server

- list of voip security stuff

        http://linux-voip.net/Testing/

- voip howto
        http://linux-voip.net/Howto/

c ya
alvin


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------