Why Over 90% of VoIP Services Are Vulnerable to Attack

John Ashcroft, Attorney General, in remarks at theexpectations (e.g., quality of sound).
High Technology Crime Investigation Association 2004The majority of VoIP computer phones require a
International Training Conference held on Septemberminimum of 20 kps (kilobytes per second) of
13, 2004 stated, "We have seen worms and virusesbandwidth (information carrying capacity) for data
attack...disrupting basic services...And with the increasedpackets to travel across the Internet, which is why
use of the Internet and especially peer-to-peermost require a minimum high speed Internet connection
networking, we have seen malicious code spreadin order to function without corrupting the quality of the
more quickly and infect more personal computers thanvoice.
ever before. The cost of these worms, viruses, andAlthough in the minority, a few VoIP computer phone
denial-of-service attacks...reaches into the billions ofproviders, some of which are reputable, require a
dollars."minimum of less than 10 kps (kilobytes per second) of
In an article written by Daniel A. Morris, Assistant USbandwidth (information carrying capacity), which is why
Attorney, Computer and Telecommunicationstheir services can be used with dial-up connections or
Coordinator with the District of Nebraska stated inhigh speed (e.g., cable), satellite, and wireless
"Tracking a Computer Hacker", that the "The modernconnections.
thief can steal more with a computer than with a gun.Over 90% of VoIP services operate using industry
Tomorrow's terrorist may be able to do more damagestandard codec (encryption codes) and industry
with a keyboard than with a bomb."standard protocols.
Ralph Echemendia, head of Intense School which trainsComputers are assigned a different numeric Internet
executives regarding network security risks, statedProtocol (IP) address while on line, which is analogous
that "Telecom providers are one of the main targetsto mail where you would have an identity location with
for malicious attackers because they controlyour street number, city, state and zip code.
communications for everybody."Relative to a protocol, the IP (Internet Protocol)
Sophisticated hackers have learned how to tap intoaddress is a number that identifies the user and their
sensitive information traveling on the Internet, and theircomputer. Industry standard codec and industry
focal point is communication.standard protocols are open and interpretable to the
How is this possible?public. Unscrupulous hackers frequently launch their
It is fairly simple. First, you should be aware that emailattacks against VoIP (Voice over Internet Protocol)
services operate off of email servers, and webservices that operate on these publicly open and
services operate off of web servers. Both emailinterpretable standards.
servers and web servers are built for data and not forPeer-to-peer services, as well as over 90% of all VoIP
voice.computer phone services, operate on industry
Because VoIP has voice, it requires a system that willstandard codec and industry standard protocols. In
convert the voice into data packets to travel acrossother words, their lines are not secure.
the Internet, and then convert back to voice atIM services also create targeted vulnerability to vicious
destination. However, VoIP should not be consideredhacker attacks by a simple monitoring program made
just another application residing on a data network, asavailable that enables electronic eavesdropping.
it necessitates a real time service due to performance