Mark Collier's VoIP Security Blog

Upcoming Presentations at VoiceCon

The next VoiceCon will be August 20-23 in San Francisco. VoIP security will be a key topic and I will be participating in the following sessions:

o Morning Call - Eric Krapf is planning several 15 minute sessions presented to the full conference audience. They include SIP, Web 2.0, and VoIP security. This is cool, because VoIP security is now considered an important enough issue to warrant a general session. The Morning Call is at 8:00 on Wednesday August 22.

o VoIP Security Tutorial - David Endler and I will be presenting a 3-hour tutorial on VoIP security. The tutorial is at 9:00 on Monday August 20.

o VoIP Security Panel - I will be moderating a panel, with David Endler and Krishna Kurapati. The panel will be at 2:45 on Tuesday August 21.

Sipera Webpage on VoIP Vulnerabilities

Sipera has a page with various VoIP vulnerabilities. They have lists for generic and specific vulnerabilities. I am not sure why they have a generic list, seems like that would be better put in a white paper. The specific list has some actual vulnerabilities:

http://www.sipera.com/index.php?action=resources,threat_advisory&all=Specific&

List of VoIP Security Articles

Sipera has a number of useful pages on their website, including a list of recent VoIP security articles. Dan York of BlueBox Podcast fame and I have similar lists, but it is still worth a visit.

http://www.sipera.com/index.php?action=resources,vulnerabilities_list

Shawn Merdinger Posts Part 3 Of His Pucker UP Questions

http://voipsa.org/blog/2007/06/20/pucker-up-intimate-voip-phone-security-questions-part-3-of-3/

Another VoIP Security Video on YouTube

Here is another VoIP security video. This one is short and sweet, and focused on SIP:

http://www.youtube.com/watch?v=UA1quyLOTdg

Video By Rodney Thayer at LayerOne 2007

Rodney Thayer did a presentation at the 2007 LayerOne conference. I am listening to it now, so hopefully it is interesting :) Anyway, here is the link on YouTube:

http://www.youtube.com/watch?v=5_hvdkUlyT4

My Presentation from INNUA

I attended the Nortel INNUA conference this week. Nortel had a ton of good information about general network and VoIP security. I would like to post all of their presentations related to security, but am not sure I have permission. Anyway, here is my presentation:

Download collier_innua.ppt