Caution urged for switch to internet phones

Jan 26, 2005

Federal agencies and other organizations that are considering switching their telephone systems to Voice Over Internet Protocol (VOIP) should proceed with caution and carefully consider the security risks, says a recent report* by the National Institute of Standards and Technology (NIST).

VOIP is an important emerging technology that makes it possible to place telephone calls using a broadband Internet connection rather than traditional, circuit-based telephone lines. While it shows promise for lower cost and greater flexibility, VOIP has a very different architecture than circuit-switched telephony, and these differences result in significant security issues.

"Administrators may mistakenly assume that since digitized voice travels in packets, they can simply plug VOIP components into their already-secured networks and remain secure. However, the process is not that simple," says the NIST report. Implementing common security measures into VOIP, such as firewalls and encryption, can cause poor voice quality and blocked calls if not done carefully and with the proper equipment. Designing, deploying and securely operating a VOIP network is a complex effort that requires careful preparation, says the report.

NIST recommendations to help in the transition to secure VOIP include: develop appropriate network architecture, including separate voice and data networks where feasible and practical; ensure that the organization can manage and mitigate risks to their information, system operations, and continuity of essential operations when deploying VOIP systems; use and routinely test the security features included in VOIP systems; update VOIP software regularly and frequently; and, since worms, viruses and other malicious software are common on PCs connected to the Internet, do not use "softphone" systems that implement VOIP using a PC with a headset and special software.

*D.Kuhn, T. Walsh, S. Fries, Security Considerations for Voice Over IP Systems, NIST Special Publication 800-58, is available at csrc.nist.gov/publications/nistpubs/index.html

Source: NIST

Explore further: Pilot sites in energy from coffee waste show good results

add to favorites email to friend print save as pdf

Related Stories

AOL says to sell 800 patents to Microsoft for $1.0 bn

Apr 09, 2012

AOL announced plans to sell more than 800 patents to Microsoft in a $1.056 billion deal giving the struggling Internet pioneer a needed cash injection as it seeks to fend off pressure from shareholders.

Encrypted VoIP not as secure as it sounds

May 26, 2011

(PhysOrg.com) -- Linguistics researchers working with computer scientists at the University of North Carolina have shown that voice conversations over the Internet, even if they are encrypted, are not as secure ...

Recommended for you

China's Alibaba plans IPO for week of September 8

15 hours ago

Chinese e-commerce giant Alibaba plans to hold its initial public offering on the US stock market the week of September 8, the Wall Street Journal reported Saturday, citing a person familiar with the matter.

Tablet sales slow as PCs find footing

15 hours ago

Tablets won't eclipse personal computers as fast as once thought, according to studies by market tracker International Data Corporation (IDC).

Startups offer banking for smartphone users

15 hours ago

The latest banks are small enough to fit in the palm of your hand. Startups, such as Moven and Simple, offer banking that's designed specifically for smartphones, enabling users to track their spending on the go. Some things ...

FIXD tells car drivers via smartphone what is wrong

Aug 29, 2014

A key source of anxiety while driving solo, when even a bothersome back-seat driver's comments would have made you listen: the "check engine" light is on but you do not feel, smell or see anything wrong. ...

User comments : 0