[VOIPSEC] VeriSign webcast on voip vulnerabiliites

[dave_endler at 3Com.com]

Just saw this in my inbox, VeriSign is hosting a webcast today at 2pm EST on
VoIP Security.  Might be worth tuning in. 

<snip>

Topic: Voice-over-Internet Protocol (VoIP) Vulnerabilities 
Date: Wednesday, July 19, 2006 
Time: 2:00 pm, Eastern Daylight Time (GMT -04:00, New York) 
Meeting number: 581 421 322 
Meeting password: voipvulns2006 

Please click the following link to see more information, or to join the
meeting. 

https://verisign.webex.com/verisign/j.php?ED=89603287&UID=33870507

One technology that has experienced a recent explosive growth is Internet
Protocol Telephony, better known as Voice over Internet Protocol (VoIP),
which effectively integrates data and voice communications. VoIP has already
proven a cost-effective solution for individuals and corporations that
already have perpetual high-speed Internet connections. VoIP will be the
only communications medium available for voice traffic in the foreseeable
future, and the current movement toward integrating voice and data traffic
is indeed inexorable. However, VoIP technology is immature and is thus
another factor to consider on an otherwise burdened infrastructure. This
report attempts to determine and enumerate the nature of the security and
safety threats putting today's corporate VoIP networks at risk. It
illustrates the rapidly increasing rate of exploitation and attack vectors,
describing attacks that are both general (directed against the Internet
backbone of the VoIP network) and specific (targeted toward specific VoIP
implementations).



-dave

David Endler
Director of Security Research
TippingPoint, a Division of 3Com