20 September 2010

Most corporate networks are still sensitive to exploit, says the director of VIPER Lab at VoIP vendor Sipera, where he analyses penetration to clients' business VoIP networks.

He says he sees only 5% of these networks are correctly organized to block this attack, which can yield audio and video files of whole conversation. The encryption is almost never turned on granting unauthorized access.

The brightest example is the attack at the Forrester Security Forum in Boston last week using a Cisco switch, two Polycom videophone and a laptop armed with a hacking tool called UCSniff pulled together from open source tools.

Being received, the audio and video from the targeted call flow through the laptop, where it can be viewed and recorded
Encryption is the answer for this problem existence.

The best protection for the network is to turn on encryption for both signaling and media. The problem isn't with the networking or VoIP, but rather with the way they are configured in the network.

Moreover, according to the research 70% of the networks are vulnerable to toll fraud attacks that utilize corporate network as a proxy long distance calls.

Back to All news →