[VOIPSEC] Anyone know of a hosted service for scanning security of SIP services?
dyork at voxeo.com
Wed Apr 27 11:39:58 EDT 2011
Here at SIPNOC this week, one of the attendees asked me if there was a hosted service that could test the security of a SIP server. Something like the port scanning services like "Shields Up" (http://en.wikipedia.org/wiki/Shields_Up ) and the many other similar services.
The person asking was from a service provider who is selling SIP connectivity to small businesses with IP-PBXs. Many of these small businesses don't have IT staff (and perhaps have purchased their IP-PBX from a big box store, online, etc.). Those SMBs don't know anything about security. He was wondering if there was any service he could direct his customers to where they could just go and get a scan of their externally-exposed SIP connections.
I haven't heard of one... but this does seem like a cool service that someone could offer. Anyone heard of one? (Anyone going to write one after this message? ;-)
Dan York, CISSP, Director of Conversations
Voxeo Corporation http://www.voxeo.com dyork at voxeo.com
Phone: +1-407-455-5859 skype: danyork sip:dyork at voxeo.com
Join the Voxeo conversation:
Twitter: http://twitter.com/voxeo http://twitter.com/danyork
More information about the Voipsec