Launched VoIP security testing tool

Yesterday (August 3), at the Black Hat Conference, security researchers introduced 13 tools to check the security of new VoIP network systems.

These tools are designed to test the security of Internet telephony (VoIP) systems being increasingly popular, said TavaPoint's Dava Endler, director of security research. TippingPoint is a unit of 3Com VoIP solution provider.

Each of the 13 new tools introduced can be used to attack VoIP systems such as overloading the phone or overloading the VoIP feeder with malicious packets, making overloaded the phone with calls, forced to hang up, restart the phone or assign devices to an object ., Endler said.

VoIP tools are increasingly widely used in businesses because this system has many features, low investment costs and the use of the same infrastructure as computer network systems.

Newly released tools are designed to help administrators identify security flaws in their VoIP systems, Endler said. " These tools are like a double-edged sword, so if you use them, be careful to limit the number of people who can access those tools ."

However, these tools can only test systems that use the Session Initiation Protocol (SIP) procedure. Although SIP procedures are increasingly being used widely in VoIP systems, the current popularity is still not high. Instead, Cisco Systems, Avaya and Nortel Networks products use their proprietary proprietary procedures.

" Most existing VoIP systems are not compatible with SIP ," Endler said. " Most of these systems are following the trend of upgrading to SIP. VoIP is still at an early stage of development ."

Dan York - Mitel's IP technology manager - insists the launch of tools today is not much impact for VoIP users. York believes that new tools will be used for its purpose. " SIP is gradually being used more widely and these tools will help us in checking the system ."

Hoang Dung