More Related Content Similar to Securing Unified Communications Systems (20) More from Voxeo Corp (20) Securing Unified Communications Systems2. About Dan York!
www.voipsa.org
www.voxeo.com
www.blueboxpodcast.com www.7ducattacks.com
© Voxeo Corporation
3. About Voxeo!
Founded in 1999
World’s largest hosted VoiceXML and CCXML platform – Over
82,000 hosted ports globally; hundreds of premise deployments
Over 150,000 developers using Voxeo platforms
The Voxeo difference: Unlocked Communications, Customer
Obsession Teams, Communications Passion
www.voxeo.com
© Voxeo Corporation
4. The Change VoIP Brings!
SIP SIP
Proxy Proxy
A SIP B
SIP SIP
Alice Bob
Media (RTP, MSRP, etc.)
© Voxeo Corporation
5. The Larger Reality!
SIP SIP SIP SIP SIP
Proxy Proxy Proxy Proxy Proxy
A SIP B SIP C SIP D SIP N
SIP Internet SIP
Media Media
Alice Proxy Proxy Bob
Media A Media B Media
© Voxeo Corporation
6. Once Upon A Time!
PSTN
PBX
Gateways
Physical
Voicemail
Wiring
© Voxeo Corporation
7. 1. Understand Your Ecosystem!
Mobile
Devices
IM Application
Internet Servers
Networks
Operating
Systems
PSTN
IP-PBX VoIP
Gateways
Web IP Social
Firewalls
Servers Network Networks
Physical Directory
Voicemail
Wiring Servers
Desktop
Email PCs Database
Servers CRM Servers
Systems
© Voxeo Corporation
8. 2. Understand Your Endpoints!
IP Phones, Smartphones, Softphones
What services are running on them?
Default passwords?
How do you patch/secure them?
© Voxeo Corporation
9. 3. Secure Your Media!
SIP SIP SIP
Proxy Proxy Proxy
A SIP B SIP N
SIP SIP
Alice Eve Bob
Media Media
© Voxeo Corporation
10. Secure Media – Hop By Hop!
Internet
Media Media
Alice Proxy Proxy Bob
Media A Media B Media
© Voxeo Corporation
11. Secure Media – End to End!
Internet
Media Media
Alice Proxy Proxy Bob
Media A Media B Media
© Voxeo Corporation
12. 4. Secure Your Signalling!
SIP SIP SIP
Proxy Proxy Eve Proxy
A SIP B SIP SIP N
SIP SIP
Alice Bob
Media
© Voxeo Corporation
16. Failover!
PBX
ITSP
Corp
HQ
Internet PSTN
PBX
Office
A
© Voxeo Corporation
18. 5. Secure Your PSTN Connectivity!
Attacks
• Toll Fraud
• Denial of Service
• Spam
Solutions
• Encryption
• Strong Authentication
• Transport Security
© Voxeo Corporation
19. 6. Secure Your Identity!
Attacks
• Fraud
• Identity Theft
• Social Engineering
Solutions
• Education
• Lock Down Spoofing
• Strong Identity
© Voxeo Corporation
20. 7. Secure Distributed Systems!
Laptop
UC
client
WiFi
UC
System
Firewall Internet Café
Router
Corp
HQ
Mobile
Data
Network Mobile
UC
client
© Voxeo Corporation
21. How Do You Securely Federate?!
Internet
Corporate Corporate
Network Network
UC UC UC UC
System System System System
Corp
HQ
Office
A
Corp
HQ
Office
A
Company
A
Company
B
© Voxeo Corporation
22. What if the Cloud Isnʼt There?!
Corporate
Internet
Network
IVR Voicemail
IM IM IM
Presence Presence Presence
Call Call Call
Control Control Control
Corp
HQ
Office
A
Office
B
PSTN
© Voxeo Corporation
23. Questions About the Cloud!
What kind of availability guarantees / Service Level Agreements (SLAs)
does the platform vendor provide?
What kind of geographic redundancy is built into the underlying
network?
What kind of network redundancy is built into the underlying network?
What kind of physical redundancy is built into the data centers?
What kind of monitoring does the vendor perform?
What kind of scalability is in the cloud computing platform?
What kind of security, both network and physical, is part of the
computing platform?
Finally, what will the vendor do if there is downtime? Will the downtime
be reflected in your bill?
© Voxeo Corporation
25. Today...! ITSP
ITSP
ITSP
ITSP
ITSP
ITSP
ITSP
ITSP
ITSP
ITSP ITSP
ITSP
ITSP
ITSP PSTN ITSP
ITSP
ITSP
ITSP
ITSP ITSP
ITSP
ITSP
ITSP
ITSP
ITSP ITSP ITSP ITSP
ITSP ITSP
ITSP ITSP ITSP ITSP ITSP
© Voxeo Corporation
26. Resources!
VoIP Security Alliance
• www.voipsa.org
• www.voipsa.org/blog
Hacking Exposed: VoIP
• www.hackingvoip.com
Seven Deadliest Unified Communications
Attacks
• www.7ducattacks.com
© Voxeo Corporation