DATA VoIP SOLUTIONS: THE FUTURE TO COME

voip security image2 security of voip image3 voip security image
 
Where Am I > Data-VoIP-Solutions/VoIP-Security
 
 
 

 VoIP Security

VoIP security is often called into question, yet VoIP is generally as secure as any LAN, or corporate networked system.

 

VoIP voice data is transmitted via a packet-switched data network using IP.  VoIP systems can carry a significant higher number of calls, and very much faster, than traditional PSTN networks due to compression of the voice packets, modern
broadband technology and a number of other gateway developments which have reduced the previous packet delivery problems to an extent that the protocol is now a viable mainstream telephony solution to most business needs and the attention given to VoIP security reflects this.

 

There is actually very little difference between VoIP security and that required for any other type of data transmission system.  Look upon it the same as you do your email system; the same as your office LAN if you have one. You probably have a system in operation whereby only authorized personnel can use certain aspects of the network.  You can do the same to improve your VoIP security. 

 

However, having said that, let’s have a look at potential weak points that budding hackers may see as good points of attack.

 

IP PBX CALL MANAGEMENT BOXES

 

PBX stands for Private Branch Exchange, and is piece of software running on a server.  It’s function is to deal with all the switches and connections involved in the telephone system.  These can be attacked by hackers or viruses which could compromise sensitive data.  VoIP security systems should ensure that the IP PBX boxes are sufficiently protected.  

 

This equipment should be placed behind firewalls, locked down and regularly monitored for unwarranted intrusions using intrusion-detection software.  VoIP security can be improved by putting the server in a different domain from the rest of the system, making it much more difficult for intruders to reach.

 

GATEWAYS AND DATA PACKETS

 

The gateway's job is to convert voice to data packets, transmit them then receive and convert the packets back into voice. The gateway is a threat to VoIP security since it can be hacked into unless there is an access-control system in place to prevent unauthorized people from accessing the system.  VoIP calls should only be permitted to specific people, and VoIP security can be improved by issuing passwords to individual users.

 

Another threat to VoIP security are the data packets themselves, which can be hacked into using data-sniffing techniques.  Packet sniffers, as they are often called, capture binary data passing through your network and can reroute it to a computer on another network for decoding into a readable form.  In order to do this, the ‘sniffer’ has to be on the same network wire as the packet is using to reach its destination.  The specific threat to VoIP security is that there is usually a lot of information passing at any one time, and the hacker has a higher probability of getting useful information than from a conventional telephone system.

 

Encrypting VoIP traffic and routing it through a virtual private network would reduce the risk, and most corporate systems increase their VoIP security by having multiple encryption layers for external messages.  Internal VoIP security could be improved by running internal VoIP messages through this corporate network.  Small businesses should seek the advice of their supplier, or of a VoIP security expert if they feel that they may be subject to such attacks.

 

In the final analysis, however, there are no real differences between VoIP security and the normal security concerns associated with any data network service, such as normal office internet and email LANs.  The security firewalls and restricted access to use, common on these systems, should suffice to deal with any VoIP security concerns..