Druid - VOIP Attacks (Video)

VoIP Attacks! is divided into two sections. The first section is an overview of a collection of currently relevant attacks against Voice-over-IP systems, categorized into four impact zones; attacks against Availability, attacks against Integrity, attacks against Confidentiality, and vendor-specific attacks. The attacks are discussed in regard to what causes the target system to be vulnerable to the attack, how the attack works, what effect a successful attack has on the system in question, what tools are publicly available to perform the attack, and what mitigation steps can be taken to prevent the attack. The second section of this presentation will focus on the mitigations suggested for each attack in the first section, what problems those mitigations have, and what issues may arise when attempting to implement those mitigations.