This webinar discusses VoIP security best practices. It outlines common VoIP security threats like call interception, denial of service attacks, and data exfiltration. It then provides recommendations for securing VoIP systems, including using strong passwords, keeping systems updated, limiting remote access and management, and using a session border controller. The webinar emphasizes the importance of working with a SIP provider that follows security best practices.

1. Proprietary and confidential. © 2015 IntelePeer, Inc. All rights reserved.
Webinar: VoIP Security Best Practices
Shawn Augenstein

2. Common Threats
Best Practices
Importance of a SBC
Q&A
Getting Started
Introduction
Leveraging your
Service Provider

3. The following security issues and
attacks have been identified on many
standard VoIP implementations.
Common Security
Threats

4. 1Call Interception

5. 2Denial of
Service Attacks

6. 3Exfiltration of Data

7. 4Vishing

8. 5Spamming over
Internet Telephony
(SPIT)

9. 6Caller ID Spoofing

10. Session
Manipulation
7

11. 8
War Dialing

12. 9
Registration
Hacking

13. 10Man-In-The-Middle
Attacks

14. Security Best Practices

15. P A S S W O R D S
Secure all VoIP devices that have a configuration interface
Join 2 or more words together
Include numbers and letters
Use minimum 8 characters, 12 characters is optimal

16. My Favorite movie line from Dirty Dancing is:
N o b o d y p u t s B a b y i n t h e c o r n e r
P A S S W O R D T I P S
Choose a line from your favorite song, film or play
Then use numbers, symbols and mixed-case letters to recreate it.
1987 is the year Dirty Dancing came out
My favorite actor is Patrick Swayze
NpBitC87P!
here is my password

17. v p n
Virtual Private
Network
remotelyaccessyournetwork
TRAFFIC ENCRYPTED

18. Pa tc hes
Keep systems up-to-date with operating system
patches.
New system VULNERABILITIES are being found
every week, so it is important to patch systems
REGULARLY.

19. Ma nagement
Interfaces
Open control ports are easily found.
If a system can be reconfigured remotely,
then a call can be rerouted to
international destinations or premium
numbers.

20. Services that allows a remote caller to get back to
the PBX “dial tone” has potential for making
unauthorized calls at your expense
Configure the access PIN on your smartphone.
Consider what services you want remote user to
access
Mobil e VoIP
& M o b i l i t y
S e rv ices

21. PBX Lock-
Down
VoIP phones can register with a PBX from
anywhere in the world
Limit registrations
Secure phones via password, IP address
or MAC (physical) address.
Deny access by default, and create
exceptions for authorized users.

22. Call Limits
Enable fraud protection
Uncharacteristic repeated calls to overseas
destinations
Automatically prevent calls until you authorize
the extra spend

23. Securing
Connections
from Dynamic
IP Addresses
Use a direct, dedicated connection for trunk/
interconnect connections with your provider.
Direct dedicated connections reduce the risk
of security threats.
Configure your SBC to allow only authorized
interconnect traffic to/from your trunk/
interconnect provider.

24. Session Border Controllers (SBCs) are the best edge device for
security in VoIP deployments.
full session state standard network firewall
same built in security
features
for voice traffic
SBC
Importance of a SBC

25. SBC Functions
Statistics
Security
Connectivity
QoS
Media Services

26. Securing VoIP Devices
Firewall
Keep software on PC and phone patched up
and up to date
Use best practices for passwords

27. Securing VoIP Devices
WHEN DISPOSING OF YOUR PHONE
Remove your username and passwords
Uninstall the application on soft phones
Complete a factory reset of phone to remove
directory and call records
Change your password on the VoIP service

28. Proprietary and confidential. © 2015 IntelePeer, Inc. All rights reserved.
Leverage your Provider
Intelepeer’s Communications as a Service platform
for voice and unified communications enablement
SIP provider since 2003
Certified with all leading UC and PBX systems
With IntelePeer you can be certain Security Best
Practices are followed.

29. service
provider
support
C a l l B a r r i n g
F r a u d A l e r t s
IntelePeer’s Fraud Prevention Efforts
T L S / S R T P

30. Q&A

31. Proprietary and confidential. © 2015 IntelePeer, Inc. All rights reserved.
www.intelepeer.com
177 Bovet Road Suite 400| San Mateo, CA | 94402 | T: +1.650.525.9200 | F: +1.650.287.2628
© 2015 IntelePeer
Contact us at
sales@intelepeer.com or
877-336-9171