Technical Level: Intermediate

Speaker: Andrew Graydon, CTO, BorderWare Technologies Inc.
VoIP is no longer hype. It’s a business reality. Gartner predicts that 90% of all new corporate telephone networks will be IP-enabled and based on SIP protocols by 2008. It’s only a matter of time before VoIP becomes a mission critical communication system. Still, concerns remain around the security of VoIP and the underlying SIP protocol, fearing that they are susceptible to similar types of threats and exploits that plague the Web and email. Today organizations of all sizes need to evaluate and understand the security measures available that allow companies to deploy real-time messaging, voice, data, video and other SIP based applications with confidence.

In this session, Andrew Graydon examines specific SIP security problems including voicemail spam, identity theft, impersonation, session eavesdropping, voicemail bombing, hijacking and redirection. He will explore where traditional perimeter firewalls fall short and discuss what steps need to be taken to secure and manage the dynamic nature of real-time SIP communications. Andrew will discuss how to manage and protect the flow of SIP communications between secured and unsecured networks.

Presentation: PDF Here

Speaker: Leigh Honeywell
From the home to the enterprise, Voice over IP technologies are changing the telecom industry. Their impact on information security is broad and complex. After a quick survey of traditional telecom security, as well as VOIP products and protocols, Leigh will discuss emerging best practices in VOIP security. She will also demonstrate several interesting tools and attacks.
Leigh Honeywell is CEO and co-founder of Sociaa, an Agile technology consultancy in Toronto, Ontario.

Presentation: PDF Here