VoIP 'Crypto' Phones Can Be Fooled by Voice Impersonation - Internet Telephony

»Free Premium Content Internet Telephony: 12/04/2014 eNewsletter

Featured Articles » The Future of Messaging » Mutualink Becomes Tool of Choice For Connecting Schools, First Responders in New York Counties » Hosted PBX Perfect for Startups » Video Conferencing Delivers Long Distance Face-to-Face Communication   Sponsored By: ITEXPO Conference: January 27 - 30, 2015 Exhibits: January 28 - 30, 2015 Miami Beach Convention Center Register Today / Exhibit & Sponsor [Discover] The Next Frontier in Communications Discover Communication Tools that Dramatically Increase Productivity while Reducing Total Cost. New tools to improve customer engagement Hosted communications to improve services and reduce TCO Web-based applications to empower the mobile workforce SDN, NFV, UC, WebRTC, SIP, SBCs and More   Top Stories » Carrier IP Telephony Market Makes Gains Through Third Quarter 2014 » Preparing for Click-to-Call in the Mobile Customer Support Age » Liif Pillbox Alerts On Missed Medicine » FCC Fines Newport Television for Improper Use of Phone Recording   From The Expert Corner December 03, 2014 VoIP 'Crypto' Phones Can Be Fooled by Voice Impersonation By Tara Seals , VoipMonitoringZone Contributor In a post-Snowden world, surveillance is top of mind for many — as is the growing tsunami of cybercrime. Establishing secure VoIP communications is a crucial task necessary to prevent eavesdropping and surveillance that can make confidential information vulnerable, as well as man-in-the-middle (MitM) attacks that can either intercept messages or inject fabricated ones. So-called “crypto phones” claim to prevent against these compromises, but new research suggests that they aren’t as airtight as advertised. “Given the surge in popularity of computing devices, ensuring the security of VoIP connections is very important for personal users, and especially for business users,” said team leader Nitesh Saxena, Ph.D., associate professor of CIS, a member of the Center for Information Assurance and Joint Forensics Research (CIA|JFR), and the director of the University of Alabama at Birmingham Security and Privacy in Emerging computing and networking Systems (SPIES) research group. According to the UAB research, traditional means of end-to-end security for VoIP require a dedicated infrastructure and the use of things like public keys, which may impose unwanted trust onto third parties. In contrast, crypto phones, like those offered by PGPfone and Zfone (News - Alert), use a peer-to-peer mechanism based on cryptographic protocols and a do-it-yourself security approach. Essentially, these employ what’s known as Short Authenticated Strings (SAS (News - Alert)), validated by end users using their voices...Read More Read more about Cable, Satellite, Information Technology   Featured Video Expose Telco Assets to Web Content Management Systems   TMCnet Free Premium Content » How Mobile is Transforming Enterprise Customer Experience » VoIP Security: More Than Just IT Risk » Introduction to VoIP Fraud    Latest Blogs » You need a Flip Phone for Your Data Center   Featured Channels » Call Center Services - Call Center Services » Internet Telephony - Features » IP Communications   Webinars Download One of Our Webinars Today to learn about new opportunities to enhance your business. http://www.tmcnet.com/webinar/   Become a TMCnet Columnist! Become a TMCnet columnist! Want to contribute your expertise to a growing audience of technology professionals? Become a writer, blogger or columnist for the TMCnet Web site and this newsletter. Contact TMCnet Group Editorial Director, Erik Linask, at elinask@tmcnet.com for details.

This email was distributed by: Technology Marketing Corporation, 800 Connecticut Avenue, Norwalk, CT 06854 As a valued reader or attendee of TMC's publications and events, you will occasionally receive carefully-screened offers and free product information via email. If you no longer wish to receive this type of email, please go to http://www.tmcnet.com/enews/subs.aspx?eml=ignoble.experiment@arconati.us to adjust your preferences.