A Very Nice Security Awareness Piece
There are a lot of folks who blog in the VoIP space. Some, like my friend Andy Abramson, get lot of visibility. Others seem to be less vocal, and sometimes don't get as much visibility. I'd like to introduce you to one or two of those. Pushpa Sathish and Shyana Ramesh write often at VoIP Lowdown. Today Pushpa published this piece -
VoIP Security Challenges: 25 Ways to Secure your VoIP NetworkVoIP technology has the tech geeks buzzing. It has been touted as:
- the killer of telecoms
- a solution for the third world’s communication gap
- revolutionizing factor in international businessBut despite all the buzz, and the predictions that everyone will be it using it by 2009, why does it seem that every time you make a phone call with Skype the quality sucks…or that your Vonage calls constantly get dropped…or worse, that teenage hackers are stealing your personal information and bringing down the whole network?
I'm not going to quote the whole thing, because I want you to go read it. I'm not even going to takle the high level points addressed.
I am going to say that it's a comprehensive, thoughtful piece on 25 things for you to think about as you secure VoIP services on your network. These methods range from isolating VoIP as a service, to some more standard (or should be standard) IP security techniques. Some come in design of the network, and some come as added solutions to consider.
It's a good piece that puts an excellent framework in place for you to consider. You don't need to implement each one, but it would serve us all well to think about each and every item on this list and define our organizational response. Treat each as a question, and answer the question for your enterprise. It'll provide you the quickest and easiest gap analysis you'll ever get.
Technorati Tags: Pushpa Sathish, VoIP, VoIP secuirity, VoIPSec

Email This!
Digg it!
Del.icio.us
Reddit!
Newsvine
Comments
Anyway, better be prepare!
Information Security Awareness Training: http://www.infosecuritylab.com
Posted by: Infosecuritylab | December 7, 2006 3:45 AM