[VOIPSEC] Interesting Article - Many VOIP vulnerabilities few exploits?

[Craig]

http://www.computerworld.com/action/article.do?command=viewArticleBasic&arti
cleId=9053452&source=rss_news50


The above article predicts that there will not be many (or any) major VOIP
attacks next year.  The primary reasons the author gives are:

1. that most VOIP deployments are behind corporate network protections, 
2. that most deployments are using proprietary protocols and
3. the ROI for attackers isn't very high.


None of these reasons hasn't been stated before.  What is new is the fact
that the article is saying that 2008 won't bring any major crippling
attacks; the kind that create headlines in mainstream media.  

Thinking about it, that makes sense.  After all, although VOIP may be
spreading, it is doubtful that a single attack, or even a blended attack,
could be created that exploits all or most VOIP implementations at once.

Just my humble thought....


Craig L. Bowser
Information Assurance Manager
CISSP		SANS GSEC (Gold)
craig  reswob  net
-------------------------------
An economist is an expert who will know tomorrow why the things he predicted
yesterday didn't happen today. - Laurence J. Peter