What is VoIP Security?

Any technology that involves transfer of data or information is prone to compromised security. It happens with telephones, cell phones, email and Internet transactions. Because has the internet as its mode of transference it's possible to have your Internet-based called intercepted. To make matters worse, there are techno-troublemakers who are armed with the hacking skills needed to eavesdrop on virtually any call over the Internet they want to. It is impossible to ensure total security on information flow over the web including Internet based phone calls. As new technologies emerge with more highly developed security protocols, there will be those who consider it a unique challenge to crack these online defenses rendering security advances antiquated. The Internet has been notorious for alternating security breaches and accompanying fixes.

As VoIP becomes more popular, VoIP security continues to be stressed as a key to advancement of this technology, especially since it will thrive in the realm of the World Wide Web. There are, however, advances in VoIP security that have been utilized by VoIP providers in order to ensure protection of customer's personal information.

VoIP Security is IP Security

VoIP is vulnerable to all security issues that generally affect the traditional IP data networks. This includes viruses, worms and denial of service (DoS), spoofing, port scanning, unauthorized access from a third party. and toll fraud. In short, the same issues you deal with in compromised Internet function can be linked to the use of VoIP technology.

VoIP's Defensive Linemen

The two primary methods of security for VoIP users are tunneling and encryption. These security measures assist in providing a mechanism of trust in the safe use of the VoIP user's personal data. Most VoIP providers use Layer 2 tunneling and an encryption method called Secure Sockets Layer or SSL to keep hackers at bay. Large corporate enterprises are using similar security mechanisms based on encryption for all internal traffic flowing over the VoIP system as well. It is advisable to route all inbound VoIP traffic that flows via a firewall through a proxy server, thus eliminating any direct connection with the internet.

On a larger level, organizations that are using VoIP as a popular mode of communication rely on a multiple level defense that addresses most VoIP security issues. In this scenario, the VoIP network is divided into secure zones protected by layers of firewall, intrusion prevention, and various additional security mechanisms. The advantage with this strategy is that it allows an organization to logically split and secure separate voice and data networks in front of individual voice and data components and between interactive points within the network. A system (like the one just described) should be complete with authentication, controls access (passwords and firewalls), encryption, an audit trail of calls, and facilities. Recording these issues can prevent security issue to a large degree because they are traceable.

Securing Your VoIP Network

While VoIP being internet-based is a key vulnerability, it also has its beneficial side. The years of experience in fending off or foiling internet attacks is experience that can be used in blocking VoIP assaults; the lessons learned in the data networking field are just as applicable to VoIP networking.

One approach that should be given serious consideration is setting up a separate network for VoIP applications, running in parallel but separate from the data network. This may be considered a serious expense item that is incompatible with the perceived savings from VoIP. On the other hand, one has to consider the potential costs involved if both networks become corrupted or disrupted from an attack on one which also disrupts the other.

Here are some other methods for securing a VoIP network:

• – Enable as many of the manufacturer's security protocols as possible, adapting or 'tweaking' these to your own specifications rather than simply following manufacturer's defaults. Keep in mind that hackers and other attackers would probably know these defaults as well.
• – Apply a strong authentication and encryption for both data and voice networks. As noted above, use the lessons learned in dealing with data network security problems to establish a preemptive stance in dealing with potential VoIP security concerns.
• – Work out access controls and authentication protocols to ensure that only legitimate users can gain access to the VoIP network.
• – Use gateway and host-based anti-virus as well as anti-spyware programs to protect crucial VoIP servers. At the same time, consider establishing perimeter security protocols to protect both networks.

A key point to remember is that VoIP is built on already established equipment and applications. The experiences and lessons gained from dealing with security threats to the data network can and should be used in developing security for the voice network.

Conclusion

Because VoIP is a newer technology there is a lot of discussion about its security and reliability. But it may be interesting to note that VoIP is actually more secure than normal email or even bill paying online. You may not need to be too worried about the security issues related to VoIP technology. Many newer technologies are emerging and, given the current trend, it won't take long before VoIP will be as secure as any other communication technology available today. Until then, if you are not sending highly sensitive information over the internet, VoIP is a relatively safe, reliable, and cost effective means of communication.

VoIP FAQ's

Q: Why should I use a VoIP Phone System?
A: With VoIP you can:

• Avoid buying an expensive phone system
• Have phone extensions in multiple locations
• Make calls between remote offices without cost
• Have inbound numbers in different area codes - be local in yellow pages but a single office
• Have a flexible voicemail system with SMS and Email
• Have unlimited capacity for calls - grow quickly
• Get detailed call statistics
• Ring different phones in your office at different times of day

Q: Do I have to have broadband to use it?
A: Yes, ISDN and dialup modem users may find the sound quality is much more variable.
On an ADSL line with 256k upstream, you can get 3 to 4 concurrent calls. When using our service in a busy office of upto 10 people, customers typically dedicate one broadband service to their phone provision.

Q: What about call quality?
A: With an ADSL connection, the call quality is usually good
If customers have sufficient bandwidth to operate the service correctly, they will experience excellent call quality. A good rule of thumb is that you can have 4 concurrent calls per broadband line.
When installing a VoIP system, you should check to see how much bandwidth is available on your Internet service. You should note that, with ADSL, the circuit speed is asymmetric, which means that whilst you may have two megabits (or similar) going down stream (from the Internet to you), you typically get much less going upstream (from you to the Internet).

If you have a large office in an area that is served well by broadband services then you might consider a symmetrical Internet service, such as a leased line or SDSL, which can be very cost effective in metropolitan areas.

Q: How reliable is the equipment?
A: There are a number of factors that affect reliability
1. The service providers server equipment. Typically, VoIP servers are in their first or second generation of development and are not yet as mature as the more traditional telephony infrastructure; therefore, as with all computers, they are liable to develop problems on odd occasions. The service providers are keen to ensure that reliability is a key objective and many have intelligent monitoring and "instant reboot" systems, so that if anything does go wrong, it is automatically detected and fixed within a few seconds, thus helping to ensure the minimum of down time.

2. The telephones themselves. Most VoIP phones have been developed by new manufacturers and the phones themselves can contain problems such as bugs and audio issues. However, as the market matures and VoIP phones are deployed in tens of thousands of units, so the manufacturers who produce good quality VoIP phones are gaining an increasing market share, with the result that these problems are increasingly rare.

3. The Internet connection itself can cause a problem. For example, if it goes down you may lose your VoIP phone connection. As discussed previously, it is important to ensure you have a back-up (e.g. can your service provider divert inbound calls to your mobile phone) and sufficient bandwidth to ensure good quality of service.

Q: Can I use my existing numbers?
A: Yes, probably if you are within the Greater London area
If this doesn't apply to you then you can apply for a new number in your area to which you could redirect your existing number. You can use your existing number as your caller id to be displayed when making outgoing calls.

Q: What type of number can I have?
A: There is lots of choice here
You can have any geographically located number with area code beginning 01 or 02. If you want to choose your own memorable number you might be charged a small premium otherwise you will be provided with a number in your chosen area. You can also have 0845 and 0800 numbers.

Q: How many numbers will I need?
A: That depends....
...on how many calls you expect to have at anyone time and whether you want DDI in which case it's one per person. A single number gives you 2 calls, one inbound and one outbound and can have up to 10 internal extentions.

Q: Can I redirect to another phone number or Voicemail?
A: Yes. You will probably have to pay the cost of diverting (which is usually a standard outgoing call).

Q: Will my VoIP phone work if the power fails?
A: No
Ordinary phones do not need a separate power connection, but as VoIP relies on your internet connection, if your broadband router has no power, your phone won't work either.

Q: Are there any phone numbers that VoIP phones can't call?
A: You can phone most phone numbers, apart from premium numbers
The big exception is the emergency services. You can't call 999 on a VoIP phone at present, so in an emergency you would need to also have a mobile or landline.