VoIP Security Insights: H.323 and IAX Protocol Exploits Explained

Sec Partners has detailed half a dozen ways to hack into VoIP phone systems that use the H.323 and Inter Asterisk eXchange protocols. Himanshu Dwivedi, principal partner at iSec, and Zane Lackey, security analyst there, also released exploit tools to back up their claims about the weaknesses in H.323 and IAX. Does this prove that we need to start thinking about VoIP security more seriously? I know I don't think about it much. Maybe the VoIP software will have to starting using security technologies like encryption or authentication. What do you think will help improve VoIP security?

"There are many ways software can leak information, and often programmers are clueless about how to prevent it," said V.N. Venkatakrishnan, assistant professor of computer science and co-director of University of Illinois at Chicago's Center for Research and Instruction in Technologies for Electronic Security.

Internet users might be reassured by web pages telling them their transactions are secure along the network, but Venkatakrishnan

The link for this article located at TechWorld is no longer available.