VoIP Security Standards

Voice over Internet Protocol is used to deliver voice communications over the Internet. Several standards have been developed to help combat the threat of VoIP security attacks that can occur during a connection.

Types

VoIP security attempts to reduce or eliminate the risks of a VoIP network. Different types of security standards include Voice over Secure IP (VoSIP), Secure Voice over IP (SVoIP) and Secure Voice over Secure IP (SVoSIP). Each system uses different encryption standards to secure VoIP communications.

Prevention/Solution

One VoIP security method involves data encryption at user end points. This prevents bottlenecks of data at routers along the network, but the end points must have enough power to handle encryption. Another standard involves compressing packet sizes, which increases VoIP performance with less delay and jitters during a call.

Warning

VoIP attacks include eavesdropping on VoIP communications and hijacking a user's subscription. VoIP connections without security standards in place are susceptible to these and other kinds of network attacks. An attacker can intercept and even change the content of an insecure VoIP session.

References

• National Institute of Standards and Technology: Security Considerations for Voice Over IP Systems
• Department of Defense: Internet Protocol Telephony & Voice Over Internet Protocol
• XMCO Partners: Voice over IP Security; A Layered Approach
• Symantec: Two Attacks Against VoIP