[VOIPSEC] FYI - German government releases study on VoIP security

[dan_york at Mitel.com]

FYI, the German  Bundesamt für Sicherheit in der Informationstechnik (roughly "Federal Agency for Information Security") 
announced yesterday (http://www.bsi.bund.de/presse/pressinf/241005VoIP.htm ) a study/analysis/report on the security of VoIP systems. 
Information about the report is at: 

   http://www.bsi.bund.de/literat/studien/VoIP/index.htm

and the 146-page (11 MB) PDF file is at:

  http://downloads.bsi-fuer-buerger.de/literat/studien/VoIP/voipsec.pdf

It is (natürlich!) entirely in German.  My quick read today was that, 
similar to the earlier NIST report, it indicates that VoIP *can* be
deployed securely if appropriate steps are taken.  Also similar to the 
NIST report, the report seems to contain a good amount of 
educational background information about how the various protocols work as 
well.

As my technical German is a bit rusty, I had to print it out for a slower 
read, but others of you who speak/read German may
wish to comment on the report back to the list.

Regards,
Dan

-- 
Dan York, CISSP, Director of IP Technology, Office of the CTO
Mitel Corporation   http://www.mitel.com/  dan_york at mitel.com
Ph: +1-613-592-2122   350 Legget Drive, Ottawa, ON, K2K 2W7 Canada
PGP key (F7E3C3B4) available for secure communication