VoIP Security Issues
Market Watch
July 11, 2005
“VoIP providers are moving into uncharted waters, Cell and GSM phones have to register the phone,” Farnsworth says. “VoIP is working from a different paradigm — for example, BYOD (Bring Your Own Device) services. How do you register users and devices, authenticate users and ensure legitimate devices?”
“It's difficult to do security [for VoIP] because of its inherent complexity,” explains Internet veteran Karl Auerbach, former ICANN Director and CTO of Internetworking Labs, a VoIP interoperability testing company. “The design of VoIP protocols tries to cover as bases as possible, implementers have to deal with all these possibilities.”
This article on Voxilla is a good overview of the wide variety of security issues present on VoIP phone systmes, including issues regarding activation and authentication of VoIP phones. VoIP calls account for a growing number of financial transactions that are currently unsecured over the Internet.