VoIP top security risk online

The new VOIP technology ranks as one of the top internet security risks.

According to the SANS Institute’s 2006 list of “Top 20 Internet Security Attack Targets,” VOIP attacks have continued to multiple as the technology has grown in popularity. VOIP was only one of two network devices that made this year’s list.

Their seem to be many reasons the VOIP systems have become an easy target for attackers – some vendors mistakes, but many mistakes from the consumer as well.

A number of the VOIP phone and products (including those specifically from Cisco Unified Call Manager and Asterisk) contain enough vulnerability that the systems can be crashed or even completely hijacked. Attackers then use the hijacked systems to run even more attacks, such as phishing, eavesdropping, toll fraud, and denial of service.

Most often, the flaws in the security have already been addressed by the vendor with a security patch. The general consumer doesn’t take advantage of theses patches until after it is too late. In order to slow or stop the spread of attacks, the public will have to be educated on getting into the practice of protecting their systems.

The SANS Institute includes suggestions for doing just that. Some of the items include: keep your security up to date by downloading patches, keep fire walls updated, use VOIP protocol fuzzing, and change all default passwords.

Taking steps today will save the consumer hours of headaches tomorrow.