Hacking Exposed Unified Communications & VoIP Security Secrets & Solutions 2/E

by Mark Collier, David Endler

Overview

The latest techniques for averting UC disaster

Establish a holistic security stance by learning to view your unified communications infrastructure through the eyes of the nefarious cyber-criminal. Hacking Exposed Unified Communications & VoIP, Second Edition offers thoroughly expanded coverage of today’s rampant threats alongside ready-to deploy countermeasures. Find out how to block TDoS, toll fraud, voice SPAM, voice social engineering and phishing, eavesdropping, and man-in-the-middle exploits. This comprehensive guide features all-new chapters, case studies, and examples.

• See how hackers target vulnerable UC devices and entire networks
• Defend against TDoS, toll fraud, and service abuse
• Block calling number hacks and calling number spoofing
• Thwart voice social engineering and phishing exploits
• Employ voice spam mitigation products and filters
• Fortify Cisco Unified Communications Manager
• Use encryption to prevent eavesdropping and MITM attacks
• Avoid injection of malicious audio, video, and media files
• Use fuzzers to test and buttress your VoIP applications
• Learn about emerging technologies such as Microsoft Lync, OTT UC, other forms of UC,and cloud and WebRTC

Product Details

ISBN-13:	9780071798761
Publisher:	McGraw Hill LLC
Publication date:	12/20/2013
Series:	Hacking Exposed
Edition description:	2nd ed.
Pages:	560
Product dimensions:	7.10(w) x 9.10(h) x 1.20(d)

About the Author

Mark Collier is the CTO/VP Engineering at SecureLogix, where he directs research and development, UC vulnerability research, and design of the company’s UC security products. He is actively performing research into ongoing security threats including TDoS, social engineering and phishing, voice SPAM, and various types of fraud.

David Endler is the director of product development at AVAST Software. He founded an industry-wide group called the Voice over IP Security Alliance, www.voipsa.org. David was named one of the Top 100 Voices in IP Communications by IP Telephony magazine.

David Endler is the director of security research for 3Com's security division, TippingPoint, where he oversees product security testing, the VoIP security research center, and their vulnerability research team. While at TippingPoint, David founded an industry-wide group called the Voice over IP Security Alliance (VOIPSA) in 2005. VOIPSA’s mission is to help VoIP adoption by promoting the current state of VoIP security research, testing methodologies, best practices, and tools. David is currently the chairman of VOIPSA which boasts over 100 members from the VoIP vendor, carrier, and security space (http://www.voipsa.org).Prior to TippingPoint, David was the technical director at security services startup, iDefense, Inc. which was acquired by VeriSign. iDefense specializes in cyber security intelligence, tracking the activities of cyber-criminals and hackers, in addition to researching the latest vulnerabilities, worms, and viruses. Prior to iDefense, David spent many years in cutting edge security research roles with Xerox Corporation, the National Security Agency, and Massachusetts Institute of Technology. As an internationally recognized security expert, David is a frequent speaker at major industry conferences and has been quoted and featured in many top publications and media programs including the Wall Street Journal, USA Today, BusinessWeek, Wired Magazine, the Washington Post, CNET, Tech TV, and CNN. David has authored numerous articles and papers on computer security, and was named one of the Top 100 voices in IP Communications by IP Telephony Magazine.David is a Summa Cum Laude graduate from Tulane University where he earned a Bachelors degree and Masters degree in Computer Science.

Table of Contents

1 VoIP Components & Targets
2 Footprinting
3 Scanning & Enumeration
4 Toll Fraud & service Abuse
5 Harassing Callers & TdoS
6 Social Engineering & Information Harvesting
7 Voice Spam & Phishing
8 Infastructure Denial of Service
9 Network Eavesdropping
10 Interception
11 Cisco Unified Cisco Call Manager
12 Avaya Communication Manager
13 Microsoft Lync
14 Cloud, Emerging, and other Technologies
15 Fuzzing & Disrupting of Service
16 VoIP Signaling Manipulation
17 Audio & Video Manipulation