How to Cheat at VoIP Security

Chapter 5

Threats to VoIP Communications Systems

Solutions in the chapter:

■ Denial-of-Service or VoIP Service Disruption

■ Call Hijacking and Interception

■ H.323-Specific Attacks

■ SIP-Specific Attacks

Introduction

Converging voice and data on the same wire, regardless of the protocols used, ups the ante for network security engineers and managers. One consequence of this convergence is that in the event of a major network attack, the organization’s entire telecommunications infrastructure can be at risk. Securing the whole VoIP infrastructure requires planning, analysis, and detailed knowledge about the specifics of the implementation you choose to use.

Table 5.1 describes the general levels that can be attacked in a VoIP infrastructure.

Table 5.1