Re: Conducting Risk Assessment for VOIP and Thin Client

[Ivan Arce <ivan.arce () coresecurity com>]

Here's the URL:
http://csrc.nist.gov/publications/nistpubs/800-58/SP800-58-final.pdf

Also Dave Piscitello's VoIP Security resources site is worth a good visit:

http://hhi.corecom.com/voipsecurity.htm

-ivan


Paul Robertson wrote:
> NIST has something for VoIP in the SP-800 series, it's missing some
> things IMO, but it's a good start for the basis of a risk assessment.
>
> Paul
>
> On 6/21/06, Chris Hammer <CHammer () fcbnm com> wrote:
> >  Good morning,
> >
> >  I have been tasked with conducting a Risk Assessment / Vulnerability
> > Assessment on a  VOIP and Thin Client environment. Does anyone have a
> > good template to start with, as well as ideas as to where to start? I am
> > familiar with both of these technologies and understand how they work
> > but I by no means an expert on them. Any help would be appreciated!
> >
> > Cheers!
> > Chris
> >
> > The information in this email is confidential and may be legally
> > privileged. It is intended solely for the addressee. Access to this
> > email by anyone else is unauthorized. If you are not the intended
> > recipient, any disclosure, copying, distribution or any

---
"Buy the ticket, take the ride" -HST

Ivan Arce
CTO

CORE SECURITY TECHNOLOGIES
http://www.coresecurity.com

PGP Fingerprint: C7A8 ED85 8D7B 9ADC 6836  B25D 207B E78E 2AD1 F65A


------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security? 
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's 
Choice Award from eWeek. As attacks through web applications continue to rise, 
you need to proactively protect your applications from hackers. Cenzic has the 
most comprehensive solutions to meet your application security penetration 
testing and vulnerability management needs. You have an option to go with a 
managed service (Cenzic ClickToSecure) or an enterprise software 
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can 
help you: http://www.cenzic.com/news_events/wpappsec.php 
And, now for a limited time we can do a FREE audit for you to confirm your 
results from other product. Contact us at request () cenzic com for details.
------------------------------------------------------------------------------