Around fourteen WiFi VoIP handsets and phones have been put to the test by leading security experts, who say that security problems range from potential denial-of-service attacks to more serious problems that allow “deep access” to the handset that lets a hacker get hold of any sensitive information on the phone.
Problems like this inevitable. So where is the onus to prevent such problems? It has been suggested that if we see practices like this develop as these devices become more prevalent then the manufacturers will only have themselves to blame when there’s a widespread attack.
VoIP hacking is the modern days version of war dialing – a method of automatically scanning telephone numbers using a modem, frequently ringing every telephone number in a local area to find where computers or fax machines are available, then attempting to access them by guessing passwords.
Still there are actions users can take to protect themselves. Here’s a list of WiFi VOIP security issues, and some effective ways to guard against them:
Multiple directions of attack:
As the phones get more advanced, so could the points of entry for malicious attacks increase. Email, client Web browsers, Bluetooth, SMS, WiFi, media players, and image viewers could all give hackers a point of entry. Though users can use open-source and commercial tools to regularly test their phones and networks, they’ll ultimately have to rely on vendors to also do proactive testing on these VoIP devices.
Targeting phones in public environments:
One way of doing this is a Bluetooth scanner could be hidden at the entrance to a major airport or train station and be used to grab user data. It may be best to keep Bluetooth and other wireless features swicthed off when not needed.
Rogue access points:
Meanwhile at the office or on the road, customers will have to keep their guard up and scan for rogue access points. Unscrupulous individuals will set up access points to specifically target WiFi phones in a business environment as well as at hotels and other places business people like to come together. Good device authentication and encryption can help provide protection here.
Targeted attacks:
Targeted attacks on precise voice-over-wireless networks can also be an issue, albeit one that the victims may prefer to keep quiet.