- Training
- Training Live Events
- Training Without Travel
- SANS Courses
- Certified Instructors
- Career Roadmap
- Training Calendars
- SANS @Home
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- SANS Onsite
- SANS SelfStudy
- SANS Partnership Series
- SANS Workshop Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- group discounts
- Certification
- Resources
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
the most trusted source for computer security training, certification and research
Security Analysis: Traditional Telephony and IP Telephony
- Abstract
- When implemented within an overall security mindset, IP Telephony can successfully address key business problems. It has the potential to dramatically increase the competitive effectiveness of a company and increase shareholder value. Because of the technologies and skill sets involved, IP telephony transcends the traditional job boundaries of data communications and telecommunications. The goal of this paper is to take a step back and analyze the security implications of migrating from a traditional telephony architecture to an IP telephony architecture. The key components of the two architectures, the phones/stations and the PBX/Gatekeeper/Gateway, are analyzed for vulnerabilities snooping/eavesdropping, theft of service, and denial of service..