Caution urged for switch to internet phones

January 26, 2005

Federal agencies and other organizations that are considering switching their telephone systems to Voice Over Internet Protocol (VOIP) should proceed with caution and carefully consider the security risks, says a recent report* by the National Institute of Standards and Technology (NIST).

VOIP is an important emerging technology that makes it possible to place telephone calls using a broadband Internet connection rather than traditional, circuit-based telephone lines. While it shows promise for lower cost and greater flexibility, VOIP has a very different architecture than circuit-switched telephony, and these differences result in significant security issues.

"Administrators may mistakenly assume that since digitized voice travels in packets, they can simply plug VOIP components into their already-secured networks and remain secure. However, the process is not that simple," says the NIST report. Implementing common security measures into VOIP, such as firewalls and encryption, can cause poor voice quality and blocked calls if not done carefully and with the proper equipment. Designing, deploying and securely operating a VOIP network is a complex effort that requires careful preparation, says the report.

NIST recommendations to help in the transition to secure VOIP include: develop appropriate network architecture, including separate voice and data networks where feasible and practical; ensure that the organization can manage and mitigate risks to their information, system operations, and continuity of essential operations when deploying VOIP systems; use and routinely test the security features included in VOIP systems; update VOIP software regularly and frequently; and, since worms, viruses and other malicious software are common on PCs connected to the Internet, do not use "softphone" systems that implement VOIP using a PC with a headset and special software.

*D.Kuhn, T. Walsh, S. Fries, Security Considerations for Voice Over IP Systems, NIST Special Publication 800-58, is available at csrc.nist.gov/publications/nistpubs/index.html

Source: NIST

Explore further: View from the Top: VoIP comes of age

Related Stories

View from the Top: VoIP comes of age

August 4, 2005

Voice over Internet Protocol has emerged as an increasingly popular alternative to traditional phone connections for its ability to transport voice communications over data networks like the Internet.

PGP founder unveils new VoIP security

March 23, 2006

Somewhere out there, someone is a little too curious about your data. This is the main concern of Phil Zimmermann, the creator of the industry standard PGP (Pretty Good Privacy) e-mail encryption protocol who has just debuted ...

New research aims to plug holes in VOIP before they happen

April 4, 2006

The National Science Foundation has issed four awards totaling $600,000 to the University of North Texas to lead a multi-university collaboration to develop a geographically distributed, secure test bed to analyze vulnerabilities ...

Recommended for you

Rosetta captures comet outburst

August 25, 2016

In unprecedented observations made earlier this year, Rosetta unexpectedly captured a dramatic comet outburst that may have been triggered by a landslide.

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.