VoIP security threats defined

Stuart Corner
Tuesday, 25 October 2005 19:46

Business IT - Technology

The Voice over IP Security Alliance (VOIPSA) has released the VoIP Security Threat Taxonomy, claiming it represents the first comprehensive description of security and threats in the VoIP.

The alliance says this will provide the industry with a clear view of VoIP threats, the vulnerabilities and a context for balancing trade-offs.

According to the head of the project, VOIPSA secretary and outreach chair Jonathan Zar "The importance of this accomplishment is that it gives a foundation to all future discussions on VoIP security that are both technically and socially informed. Until now, the public has been uncertain about the various threats, how risks related to each other and technical trade-offs. This is fundamental to all future work in the field."

He added: "While technical work on the taxonomy will continue, the results published today provide an effective framework with which to inform the press, the policy community and other projects within VOIPSA including: User Requirements, Best Practices and Testing."

The project, launched in late March, is the first completed project of VOIPSA, an organisation formed in February to improve the public awareness of issues and best practices for securing Voice over IP. The organization invites comments, feedback and discussion of the taxonomy via http://www.voipsa.org/Activities/

Major elements of the taxonomy include:
- Core definitions that give specific meaning to privacy and security;
- A framework that effectively connects public policy and technology issues;
- Recognition of the human element in threats as distinct from their technical means;
- Specific sets of issues for consideration by legislative bodies and by law enforcement
- A detailed structure for technical vulnerabilities across the value chain

VOIPSA also announced that membership now exceeds over 100 "distinct organisational entities" including "global companies and institutions that represent the entire value chain for VoIP".  It said that these include "major carriers, software companies, equipment vendors, large users and system integrators. New members include: Juniper, Nokia, Deloitte & Touche and BearingPoint.

However despite its press release indicating otherwise there is no comprehensive list of members on the VOIPSA website.