SF new article announcement: Two attacks against VoIP

The following Infocus article was published on SecurityFocus today:

Two attacks against VoIP
By Peter Thermos
2006-04-04

This purpose of this article is to discuss two of the most well known
attacks that can be carried out in current VoIP deployments. The first
attack demonstrates the ability to hijack a user's VoIP Subscription and
subsequent communications. The second attack looks at the ability to
eavesdrop in to VoIP communications.

http://www.securityfocus.com/infocus/1862


Also note: We enjoy publishing article submissions from the community.
For submission guidelines and contact information please see
http://www.securityfocus.com/static/submissions.html


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Re: VOIP Pen-Testing
    ... > Does anyone do VOIP pen-testing? ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
    (Pen-Test)
  • RE: VOIP Security
    ... Depending on how the phone system is set up, ... nearly endless unless the VoIP network has had a lot of serious thought ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
    (Pen-Test)
  • New article on SecurityFocus: Two attacks against VOIP
    ... The following Infocus article was published on SecurityFocus recently: ... Two attacks against VoIP ... We enjoy publishing article submissions from the community. ...
    (Pen-Test)
  • Re: Voice encryption (Stream vs CBC mode)
    ... >> And I still don't know of any forgery attacks that are of importance in a ... > matters to your VoIP application, ... Suppose 64 packets per second, ... Compression takes c ms, encryption ...
    (sci.crypt)
  • RE: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP
    ... My intention was not a worm that spreads by ASN1 but one that locates VoIP ... based communication and attacks it! ... Here is a simple description of the h323 protocol, BASED ON ASN1, feel free ...
    (Bugtraq)