16 September 2010

Persissted attacks against VoIP persist businesses brought to the necessity to defend themselves. Mostly regulations intend to protect personally identifiable information that can bring to identify theft, non-authorized use of credit cards or bank accounts against corporate phone systems.
The situation doesn't touch VoIP directly but nevertheless the rules are applied in some cases.
For instance, PCI standards announce to use strong cryptography and security like SSL/TLS or IPSEC for protecting sensitive card-holder data during transmission over open. It sounds like it doesn't refer to VoIP directly.
But there are more issues: HIPPAA postulates that companies should take steps for protecting secure health information. It doesn't seem to affect VoIP calls, but relates to recorded calls and digitally stored mail – that is part of any VoIP system. The same way, if interactive voice answer is used to lead to protected information, its use must be monitored and recorded.
Moreover, Federal Deposit Insurance Company (FDIC) set out special VoIP guidelines to secure customer data transferring in IP voice network in accordance with Graham-Leach-Bliley regulations.

Back to All news →