Re: Seeking Information regarding VoIP security Assessment

[Nikhil Wagholikar <visitnikhil () gmail com>]

Hello Abhishek,

You can read through this article, though old, still worth reading:
Article: www.cisco.com/asiapac/ipc/files/miercom_report_voip_security.pdf

There are lot of tools available for VoIP Security Assessment and
testing. You can find a list of those tools here:
List 1: http://www.security-database.com/toolswatch/+-VoIP-+.html
List 2: http://www.voipsa.org/Resources/tools.php

Also you can have a look at this thread: VoIP Security Assessment Tools
Thread: http://www.voipsa.org/pipermail/voipsec_voipsa.org/2006-March/001251.html

Besides these, just recently a VoIP Security Live Distro was released.
The distro includes VoIP security assessment tools such as UCsniff,
VoipHopper, Videojak, videosnarf, ACE, Warvox, and a number of other
useful tools along with traditional security assessment tools like
Metasploit, Nmap, Netcat, Hydra, Hping2 and others.
More Info: http://vipervast.sourceforge.net/

Hope this helps!!

---
Nikhil Wagholikar
Practice Lead | Security Assessments & Digital Forensics
Network Intelligence India Pvt. Ltd. [NII Consulting]
Web: http://www.niiconsulting.com/
Comprehensive Information Security Training
http://iisecurity.in/courses/Training Calendar.html

2009/10/14 Abhishek Kumar <abhishek.luck () gmail com>:
> Dear list,
>
> Can I have some resource materials for VoIP security and its Assessment ??
>
> regards
> abhi
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------