"The Codenomicon tools are amazing. Using them is like being attacked by the most relentless adversary who uses every possible method to find flaws in your code

We fixed subtle crash bugs in Samba that had been in the code for over ten years. We would never have found those bugs without the Codenomicon tools.

If you're serious about implementing protocols correctly, you need the Codenomicon tools."

-- Jeremy Allison,
   Co Creator of Samba


Codenomicon Whitepaper

whitepaper

Ensuring a Secure Enterprise VoIP Solution

Miia Vuontisjärvi and Ari Takanen
info@codenomicon.com
Codenomicon Ltd.

Abstract

Voice over IP or VoIP is a technique for transferring voice over networks that are based on IP protocol, basically internet. It has been bubbling under for a long time, but seems now to be gaining ground. Its cost-effectiveness, flexibility and the possibility to use the existing network for voice communication are something that enterprises and organization see worth venturing. In particular Banking, Financial Services and Insurance (also known as BFSI) have adapted VoIP in both their internal communication as well as customer service.

Proper testing of the VoIP network will proactively find the vulnerabilities and help improving the quality of service and stopping the hacker attacks even before they start. First and foremost, enterprises should test and protect the services and interfaces that are facing the public interface. Often these are services that are built on top of the web (HTTP), but also other internet services such as e-mail and VoIP have their own attack vectors.

Download PDF    pdf


> Contact Codenomicon to know more about fuzzing.