Author: Valter Popeskic

Defining Basics of Voice, VoIP and IP telephony

Confusion has come along with the associated taxonomy of VoIP technology and IP telephony.  Both of them refer to use the same IP network to send voice messages. But the main difference between VoIP and IP telephony is that VoIP is connecting old fashion analog phones to specific gateway device who are able to convert analog voice data into digital bits and send them across the internet bypassing the expensive PSTN telephone networks. In the case of IP telephony the phones by them selves are digital devices and they are made to record the users voice directly into digital signal and send it across IP network using special Communication manager devices that are enabling this technology to work. IP telephony technology resides on IP network and natively uses the IP network for communication.

Internet Society is organizing today 6 of June 2012 the World IPv6 Launch. This will not mean that we will close the Internet on the IPv4 protocol and transfer it to IPv6. It will also not mean that everyone needs to make the transition today. Most of you reading this is already ready to use IPv6. Most of modern computers are able to manage and configure they network interface cards (NIC) to both IPv4 and IPv6 addresses. But what is then IPv6 launch day? Big and important websites and Internet Service Providers participate in today’s day in the way that they will begin the transition from IPv4 and permanently enable IPv6.

Cyber intellect worm “Flame” came up to notice of the experts first time at Kaspersky Lab when a specialized agency of UN “International Telecommunication Union” (in charge of information and communiqué technologies) approaches to these experts for assistance in finding an unfamiliar and mysterious malware. The Flame as a powerful computer virus has removed the highly sensitive information all over the Middle East; especially it has affected the Iran mainly.

Vishing and Toll Fraud

Vishing is quite similar to the term Phishing and it means collecting private information over the telephone system.

In the technical language the terminology of phishing is a recent addition. The main concept behind phishing is that –mail is sent to user by an attacker. The e-mail looks like a form of ethical business. The user is requested to confirm her/his info or data by entering that data on the web page, such as his/her “social security number”, even “bank or credit card account” number, “birth date”, or mother’s name. The attacker can then take this information provided by the user for unethical purposes.

The Attack of SIP protocol

We previously discussed in this blog the SIp protocol. We have also said that “Session Initiation Protocol” (SIP) is becoming popular quite fast and it has also achieved quick acceptance in “mixed-vendor VoIP networks”. One of the most striking properties of SIP is its use of “existing protocols”. And by default, SIP messages are sometimes sent in the form of plain (normal) text.

This is quite unfortunate as the very properties that make SIP striking can also be leveraged by attackers to make a compromise regarding the security of a particular SIP network.