64 posts tagged securelogix

I spent this last week at the Interop conference in Las Vegas. The conference was held at the Mandalay Bay convention center. Someone told me this is the largest property on the Vegas strip. I believe it - I was walking around in a case because I broke my ankle.

Peter Thermos has a brief, one-question survey. Fill it out if you get a chance: http://www.vopsecurity.org/index.php?name=Polls&pollID=5

VoIPShield recently released an extensive list of VoIP vulnerabilities on their Vulnerabilities Research page. Its a fairly long list. The vulnerabilities are not described in a lot of detail, no exploits are given, nor are any detailed countermeasures described.

Here are a couple of videos from the folks at VoIPShield illustrating some VoIP attacks. The first one shows a hacker walking into a office area (they say it is a bank) and after they distract the receptionist, they disconnect the lobby area VoIP phone and plug in their laptop and presumably launch a DoS attack that takes down the phone system.

Shawn Merdinger posted a summary of VoIP vulnerabilites for Q1 (Jan-March) on VoIPSA. Its great to see this. I hope he or someone does this each quarter. http://voipsa.org/blog/2008/04/14/quarterly-voip-vulnerabilities-summary/

Here is a post on VoIPSA about a new SIP analysis tool. Thanks to Shawn Merdinger: http://voipsa.org/blog/2008/04/16/xplico-network-forensic-analysis-tool/

Dan York of Bluebox Podcast fame, posted the following link to the VoIPSA web page, of the video I did at Voicecon. http://voipsa.org/blog/2008/04/18/information-week-interviews-securelogix-about-voip-security/

While I was sick at VoiceCon and didn’t record any of the videos I was planning to do, it’s great to see that Fritz Nelson over at Information Week did capture this video of Mark Collier of SecureLogix: The TechWeb folks did a nice job on the video, particularly in cutting in to some of the slides explaining what Mark was talking about.

Here is a short video where I was interviewed by Fritz Nelson of NoJitter at the most recent Voicecon. It captures a summary of where I believe we are right now with VoIP security: http://www.nojitter.com/blog/archives/2008/03/voicecon_video.html In summary: o The major PBX vendors are doing a

Nmap 4.60 was released on March 26 with some new features and fixes, including improvements in operating system and services detections and some fixes to existing bugs. Nmap can now be found at: http://nmap.org