January 2009 - Tony's Blog - Evangelyze Community Site

SIP Over TLS

Session Initiation Protocol (SIP) is not inherently secure. It is essentially a communications-specific version of the HTTP protocol that makes up the basis for web data. Just as HTTP uses SSL (Secure Sockets Layer) and security certificates to encrypt...

Published 30 Jan 2009 12:41 by tony

Filed under: VoIP, VoIP security, SIP, encryption, TLS, S/MIME, MD5, IPSec, SIP over TLS, SIPS, URI

Predictions for 2009

Everyone loves to start the year making predictions. It is a fun exercise to try and guess what will happen in the coming year, and then reflect back at the beginning of next year to see if you were right or wrong. I suppose if you develop a record of...

Published 29 Jan 2009 7:02 by tony

Filed under: VoIP, VoIP security, unified communications, 2009 predictions, Mark Collier

UC Security Threats: Call Redirection

When initiating VoIP communications with SIP, the first part of establishing a call is that the sending or initiating system sends a SIP INVITE request. The receiving or called system then sends a SIP response. The response could be that the phone is...

Published 28 Jan 2009 7:05 by tony

Filed under: VoIP, VoIP security, SIP, intercept, INVITE, call redirection attack, denial-of-service

Microsoft Releases Forefront Security for Office Communications Server (FSOCS) Beta 3

From the Microsoft Forefront Team Blog : FSOCS provides fast and effective protection against IM-based malware for OCS 2007 and OCS 2007 R2 environments by including multiple scanning engines from industry-leading security partners. FSOCS also helps reduce...

Published 27 Jan 2009 8:41 by tony

Filed under: OCS 2007, Forefront Security for Office Communications Server, Office Communications Server, Forefront Security, FSOCS

Unified Communications, Step by Step

While not related to unified communications security, I felt it noteworthy to mention that I wrote an article on unified communications for the February 2009 issue of Redmond Magazine. The article, Unified Communications, Step by Step , discusses strategies...

Published 26 Jan 2009 22:24 by tony

Filed under: implementation, Redmond Magazine, Tony Bradley, unified communications, deployment

UC Security Threats: Man-in-the-Middle (MitM) Attack

Did you ever play 'monkey in the middle' when you were a kid? That's the game where one kid stands in the middle while two or more other kids pass a ball back and forth and try to ensure that the kid in the middle doesn't intercept it...

Published 26 Jan 2009 21:34 by tony

Filed under: VoIP, VoIP security, SIP, SRTP, eavesdrop, Man-in-the-Middle attack, TLS, MitM

VoIP Attack Rings Up $120,000 Phone Bill

An Australian company received quite a shock when they got their phone bill and found that it was $120,000 higher than they expected . Investigators determined that attackers were able to access the companies phone system and place over 11,000 unauthorized...

Published 25 Jan 2009 7:27 by tony

Filed under: VoIP, VoIP security, encryption, social engineering, monitor call logs, toll fraud

Encryption is Key

VoIP is subject to a variety of threats from simply eavesdropping on calls to call hijacking, caller ID spoofing, denial-of-service, and more. There are a number of security measures that can be put in place to protect VoIP communications from these attacks...

Published 17 Jan 2009 22:12 by tony

Filed under: RTP, OCS 2007, VoIP security, SIP, encryption, SRTP

Patch Your VoIP

When a hot new technology comes along businesses flock to adopt it and implement it and benefit from all of the features and flash the new technology has to offer. They buy the 'sizzle' and want to dive right in and start using it. Security is...

Published 15 Jan 2009 22:35 by tony

Filed under: security, VoIP, patching, VoIP security

January 2009 - Tony's Blog

Syndication

Recent Posts

Archives