Story image

VoIP vulnerable to cyber attacks

16 Jul 15

New research out of the UK has revealed VoIP infrastructure has become more susceptible to cyber attacks.

The research, performed by security consultancy firm Nettitude, says VoIP infrastructure is vulnerable due to the proliferation of both its use and the tools that can used for malicious purposes. 

“The driving factor for the success of VoIP is cost reduction, both for users and providers,” Nettitude observes in its report of the findings. “But VoIP doesn’t only bring reduced costs, it also brings threats and vulnerabilities unprecedented to the telephone industry.”

According to the report, Nettitude observed a large number of VoIP attacks against servers during the first quarter of 2015. 

VoIP infrastructure is subject to most of the well-known attacks against network infrastructures. However, there are some specific attack vectors that make this a potentially attractive attack surface, the report surmises, including social threats, eavesdropping, interception and modification, service abuse, intentional interruption of service, and other interruptions such as loss of power. 

The Nettitude report says there are various ways in which VoIP traffic and systems can be targeted. 

“VoIP attacks, just like any other attacks against network infrastructure, would have different impacts on the business depending on the service that were being targeted,” the report explains. 

Nettitude found attackers were very active out of office hours, with analysis revealing 88% of attacks occurred during downtime. 

“It is a fact that many companies cannot afford security analysts for 24/7 services. The need of dedicated services is then required to ensure that appropriate responses and actions are taken when attacks are identified.”

Nettitude says a well thought out strategy should be in place for ensuring that VoIP services are not disrupted.

“Statistics show that attackers operate when IT staff are likely to be away from their services,” the report explains. “It is therefore important to have 24/7 monitoring system that will allow attacks to be detected and mitigated in real time.”

Further to an efficient monitoring system, Nettitude has gathered and continues to gather intelligence about VoIP malicious users, their respective tools and techniques. “Such intelligence will be invaluable in protecting against know offenders and their techniques, whilst putting in place mitigation strategies for unknown factors,” Nettitude explains.

“Before applying any security, understanding the VoIP environment is paramount. This will help to understand the nature of the environment and its specific threats.”

Schneider Electric's bets for the 2019 data centre industry
From IT and telco merging to the renaissance of liquid cooling, here are the company's top predictions for the year ahead.
China to usurp Europe in becoming AI research world leader
A new study has found China is outpacing Europe and the US in terms of AI research output and growth.
Google says ‘circular economy’ needed for data centres
Google's Sustainability Officer believes major changes are critical in data centres to emulate the cyclical life of nature.
52mil users affected by Google+’s second data breach
Google+ APIs will be shut down within the next 90 days, and the consumer platform will be disabled in April 2019 instead of August 2019 as originally planned.
Ramping up security with next-gen firewalls
The classic firewall lacked the ability to distinguish between different kinds of web traffic.
Platform9 aims to allow enterprises to run Kubernetes instantly
Snapfish, HPE, and Juniper use Platform9’s hybrid cloud solution to deliver a modern cloud infrastructure-as-a-service experience.
DigiPlex’s data centre heat reuse system wins award
Its solution to reuse heat to warm thousands of local homes took out the accolade at the recent 2018 Energy Awards.
STT GDC to build hyperscale data centre in Singapore
ST Telemedia Global Data Centres (STT GDC) today unveiled ambitious plans for expansion with its largest data centre in Singapore to date.