If you get a chance, check out Nicholas's VoIP security blog at:
www.secvoip.com
Search Blog
- Search Blog
Become a Fan
Books
- Amazon.com: Hacking Exposed VoIP: Voice Over IP Security Secrets & Solutions
- Amazon.com: Seven Deadliest Unified Communications Attacks
- Hacking VoIP: Protocols, Attacks, and Countermeasures: Himanshu Dwivedi: Books
- Securing VoIP Networks
- Voice over Internet Protocol (VoIP) Security
- Practical VoIP Security
- Understanding Voice over Ip Security
Conferences
Recent Posts
- Presentation by Dan York on VoIP/UC Security
- Social Media Used for Harassing Caller/TDoS
- Robo-dialing/Automated Calling Website
- New York Times Article About Toll Fraud Being Used to Fund Terrorists
- New Version of VoIP Hopper is Available
- Article About VoIP DDoS Attacks
- Skype Flaw Allows Tracking of User Location
- Article about A new VoIP Stenography Tool
- VoIP Security Toll Fraud Issue Reported at Astricon
- Article about Caller ID Spoofing and Using it to Harvest Names
General Articles
- VoIP Hopper 2.01 Released – IP Phone VLAN Hopping Tool | Darknet - The Darkside, 11/2011
- Hiding messages in VoIP packets, 10/2011
- Skype Security Flaw Potential Terrorist Threat, NYU Professor Says | Fox News, 10/2011
- Massive DDoS attacks a growing threat to VoIP services - VoIP, unified communications, Telecommunication, security, networking - CIO, 10/2011
- Courthouse News Service, 8/2011
- VoIP Security Threats Explained, 8/2011
- VoIP Security: Sweat It, at Least a Little Bit | Blogs | ITBusinessEdge.com, 1/2011
- Master of Unified Communications: Addressing UC Security Concerns | Network World, 10/2010
- Cisco Community Central: Innovators Forum, VoIP Security, 11/2010
- NoJitter Article on Vunneling, 6/2010
- NoJitter Article on UC Security, 8/2010
- Security Issues in VoIP, 7/2010
- Scammer hacks Prescott company's Internet phone system - The Prescott Daily Courier - Prescott, Arizona, 3/2010
- Alleged Hacking-Terror Effort Thwarted - WSJ.com, 6/2009
- VoIP Services are Vulnerable to Botnets, Security Researchers Say by PC World: Yahoo! Tech, 4/2009
- VoIP Data Tunnelling, 3/2009
- VoIP Security, 3/2009
- New VOIP 'Call-Jacking' Hack Unleashed - Security/Perimeter - DarkReading, 1/2008
Toll Fraud
- AstriCon VoIP Security - $400,000 toll fraud - YIKES!, 10/2011
- North West Evening Mail | News | Furness firm targeted by Somalian fraudsters, 4/2011
- BBC News - The other kind of phone hacking, 2/2011
- BBC News - Hackers target NI Department of Finance phone network, 2/2011
- Businesses Warned About Recent Toll Fraud | Bernews.com, 2/2011
- Phone fraudsters leave businesses on hook - The Globe and Mail, 11/2009
- PBX hacking continues to threaten business owners - News - News | siliconrepublic.com - Ireland's Technology News Service, 5/2009
- Businesses hit by phone fraud want political action - CTV News, 2/2009
- FEMA phones hacked; calls made to Mideast, Asia - Technology & science - Security - msnbc.com, 8/2008
- Firms warned over ‘toll’ fraud scam - News - Garstang Courier, 10/2010
- Phone scam could cost Flintshire charity thousands of pounds - Flintshire Chronicle, 11/2010
- Security Manager's Journal: Slammed with a $100,000 phone bill - Computerworld, 11/2010
- Companies hit by 400% increase in phone fraud | The National Business Review, 11/2010
- BT Wholesale The Loop, February 2010, 2/2010
- Profiting From Fraud Is Not Good Business, Protecting Your Customers Is, 11/2009
- Internet phone systems become the fraudster's tool, 10/2009
- Business Stuck With Big Bills After Phone Lines Hacked - News Story - WSOC Charlotte, 8/2009
- Increase in telecoms fraud says Minute Buyer - Leadership - Leadership | Ireland's online business and management news service - Businessandleadership.com, 1/2009
- Telecoms fraudsters threaten cash-strapped firms - News - News | siliconrepublic.com - Ireland's Technology News Service, 1/2009
- Bell Canada customer billed $207,000 after hacker breach - Ottawa - CBC News, 1/2009
Telephony Denial of Service (TDoS)
- FBI — Cyber Security: Threats to the Financial Sector, 9/2011
- FBI — Phony Phone Calls Distract Consumers from Genuine Theft, 5/2010
- Rapper The Game May Face Charges Tied To Flash Mob Calls | FoxNews.com, 8/2011
- Hack Attack: How to Protect Your Online Accounts - WSJ.com, 10/2010
- The telephony denial of service attack | Latest Security News | GSO - Network Security Resources, 5/2010
- New telephony denial-of-service attacks used by thieves, 5/2010
- Thieves Flood Victim’s Phone With Calls to Loot Bank Accounts | Threat Level | Wired.com, 5/2010
- Telephony Denial-of–service (TDOS) Being Used To Distract Consumers From Genuine Theft, Warns FBI | VOIP IP Telephony, 5/2010
- VoIP-Aided Security Threat: Telephony Denial of Service, 5/2010
- The telephony denial of service attack, 5/2010
VoIP Security Blogs/Links
- SecVoipSecVoip » VoIP/VVoIP/UC Security Blog
- VOIP Security Resources - The Security Skeptic
- Voice over IP Security Alliance (VOIPSA)
- No Jitter VoIP Security Blog
- Seven Deadliest Unified Communications Attacks
- Blue Box: The VoIP Security Podcast
- VoIP Security - VoIP News
- Ari Takanen's blog | ITworld
- VoIP security - Network World
- VoIP security Special Report at silicon.com
- Skype Security Blog
Tools
Advisory Sites
Voice SPAM/Voice Phishing
- Cybercriminals use "computer security" phone scam to grab credit card details, 6/2011
- VoIP Phishing in the Salt Lake Area, 7/2010
- Internet phone systems become the fraudster's tool, 10/2009
- Its only a matter of time until IP telephony is hit by spam and malware experts say, 6/2008
- [0806.1610] SPAM over Internet Telephony and how to deal with it
- The Anatomy of a Vishing Scam - Security Fix, Security Fix, 3/2008
- Rucus Info Page
- Vishing: The Latest, and Greatest, Security Concern | Security | bMighty.com, 2/2008
- Does UC present new opportunities for spammers? | IT Security | TechRepublic.com, 1/2008
- SPAM and SPIT: what are the dangers? | IT Security | TechRepublic.com, 1/2008
- Why VoIP is the next target for spammers | Technology | The Guardian, 11/2007
Interesting Documents
- State of Communications Security Report, 3/2011 - Bottom of Site
- PBX Hacking and Telephony Fraud Notice by Ireland’s Commission for Communications Regulations, 5/2009
- Cisco White Paper on VoIP Security
- Emerging Cyber Threats for 2009, 10/2008
- Paper on General VoIP Security, x/2007
- SANS Institute - VoIP Security Vulnerabilities, 12/2007
- eBook from ShoreTel With Chapter on VoIP Security
- NIST VoIP Security Guidelines
- VoIP Security Learning Guide
- VoIP Security: A Layered Approach
- VoIP Security Threat Taxonomy
Interesting Presentations
- Toll Fraud Presentation
- Voice of VOIPSA » Blog Archive » Slides: SIP Trunking and Security in an Enterprise Network, 9/2008
- ICE Tutorial
- Another Presentation on Nortel Unistim Vulnerabilities, xx/2007
- Presentation on Nortel Unistim Vulnerabilities, xx/2007
- Peer-to-peer SIP Security Presentation, 2/2008
- Voice of VOIPSA » Blog Archive » “Hacking and Attacking VoIP Systems” - Slides from my Astricon 2007 presentation about Asterisk and VoIP security, 1/2008
- Independent Research | iSEC Partners
- RTP Stenography
- Dustin Trammells Presentation on VoIP Security
