Tuesday, November 18, 2008

Security tool for VoIP solutions released

A new tool which allows administrators to assess if their VoIP solutions are vulnerable has been released.

UCSniff, from Sipera Systems' VIPER Lab, is a free application which is designed to allow network managers find out whether their VoIP solutions can be eavesdropped on.

It allows them to find out how easy it is to imitate an enterprise VoIP phone, download a directory and then listen in on confidential calls.

"UCSniff is an assessment tool that helps demonstrate vulnerabilities in VoIP design and implementation," said VIPER Lab director Jason Ostrom.

"It was born from the concept of combining targeted attacks against VoIP users along with the corporate directory, intelligent VLAN support, and man-in-the-middle features."

The results of a survey released last month revealed that security was one of the top-five concerns for respondents when investing in VoIP solutions.

Performance, hardware reliability, cost and technical support completed the top five in the fifth annual Enterprise VoIP Survey, by IDC and InfoWorld magazine.

No comments: