Hacking Exposed Unified Communications & VoIP Security Secrets & Solutions, Second Edition

by Mark Collier, David Endler

Overview

The latest techniques for averting UC disaster

Establish a holistic security stance by learning to view your unified communications infrastructure through the eyes of the nefarious cyber-criminal. Hacking Exposed Unified Communications & VoIP, Second Edition offers thoroughly expanded coverage of today’s rampant threats alongside ready-to deploy countermeasures. Find out how to block TDoS, toll fraud, voice SPAM, voice social engineering and phishing, eavesdropping, and man-in-the-middle exploits. This comprehensive guide features all-new chapters, case studies, and examples.

• See how hackers target vulnerable UC devices and entire networks
• Defend against TDoS, toll fraud, and service abuse
• Block calling number hacks and calling number spoofing
• Thwart voice social engineering and phishing exploits
• Employ voice spam mitigation products and filters
• Fortify Cisco Unified Communications Manager
• Use encryption to prevent eavesdropping and MITM attacks
• Avoid injection of malicious audio, video, and media files
• Use fuzzers to test and buttress your VoIP applications
• Learn about emerging technologies such as Microsoft Lync, OTT UC, other forms of UC, and cloud and WebRTC

Product Details

ISBN-13:	9780071798778
Publisher:	McGraw Hill LLC
Publication date:	12/20/2013
Series:	Hacking Exposed
Sold by:	Barnes & Noble
Format:	eBook
Pages:	560
File size:	31 MB
Note:	This product may take a few minutes to download.

About the Author

Mark Collier is the Chief Technology Officer at SecureLogix corporation, where he directs the companies Voice Over IP (VoIP) security research and development. Mark also defines and conducts VoIP security assessments for SecureLogix’s enterprise customers. Mark is actively performing research for the US Department of Defense, with a focus on developing SIP vulnerability assessment tools. Prior to SecureLogix, Mark was with Southwest Research Institute (SwRI), where he directed a group performing research and development in the areas of computer security and information warfare. Mark is a frequent speaker at major voice and security conferences. Mark has authored numerous articles and papers on VoIP security. Mark is also a founding member of the Voice Over IP Security Alliance (VoIPSA). Mark is a Magna Cum Laude graduate from St. Mary’s University, where he earned a Bachelors degree in Computer Science.

David Endler is the director of security research for 3Com's security division, TippingPoint, where he oversees product security testing, the VoIP security research center, and their vulnerability research team. While at TippingPoint, David founded an industry-wide group called the Voice over IP Security Alliance (VOIPSA) in 2005. VOIPSA’s mission is to help VoIP adoption by promoting the current state of VoIP security research, testing methodologies, best practices, and tools. David is currently the chairman of VOIPSA which boasts over 100 members from the VoIP vendor, carrier, and security space (http://www.voipsa.org). Prior to TippingPoint, David was the technical director at security services startup, iDefense, Inc. which was acquired by VeriSign. iDefense specializes in cyber security intelligence, tracking the activities of cyber-criminals and hackers, in addition to researching the latest vulnerabilities, worms, and viruses. Prior to iDefense, David spent many years in cutting edge security research roles with Xerox Corporation, the National Security Agency, and Massachusetts Institute of Technology. As an internationally recognized security expert, David is a frequent speaker at major industry conferences and has been quoted and featured in many top publications and media programs including the Wall Street Journal, USA Today, BusinessWeek, Wired Magazine, the Washington Post, CNET, Tech TV, and CNN. David has authored numerous articles and papers on computer security, and was named one of the Top 100 voices in IP Communications by IP Telephony Magazine. David is a Summa Cum Laude graduate from Tulane University where he earned a Bachelors degree and Masters degree in Computer Science.

Table of Contents

1 VoIP Components & Targets
2 Footprinting
3 Scanning & Enumeration
4 Toll Fraud & service Abuse
5 Harassing Callers & TdoS
6 Social Engineering & Information Harvesting
7 Voice Spam & Phishing
8 Infastructure Denial of Service
9 Network Eavesdropping
10 Interception
11 Cisco Unified Cisco Call Manager
12 Avaya Communication Manager
13 Microsoft Lync
14 Cloud, Emerging, and other Technologies
15 Fuzzing & Disrupting of Service
16 VoIP Signaling Manipulation
17 Audio & Video Manipulation