Seven Deadliest Unified Communications Attacks

SecureLogix Releases Report: Voice And Unified Communications State of Security 2011

By way of the Voice of VOIPSA blog, I learned that SecureLogix had formally released their "Voice & Unified Communications: State of Security Report 2011". I saw a preview of this report in one of the final sessions at the Enterprise Connect event at the beginning of March and the data seemed quite compelling.

To put this in perspective, SecureLogix sells solutions that monitor your network and protect your VoIP/UC systems. While that creates a fairly obvious bias for a report like this, it also means that they do have great data from literally hundreds of networks where their tools have been deployed.

They've done a nice job packaging up the data, providing very readable charts, including solution diagrams and listing all sorts of resources at the end. The report is available now from the NoJitter.com site:

http://www.nojitter.com/sponsoredcontent/view/cid/3900003

You need to login to the site to download it today, but the folks I know at SecureLogix say that they will also be making it available from their own site in a few months.

Sure, you have to read the report understanding that it is written from the viewpoint of a vendor with an interest in selling security solutions... but regardless it is definitely a worthwhile document to read through. Kudos to SecureLogix for creating this report - and I look forward to seeing how it changes and evolves in the years ahead.

P.S. I found it interesting that the report talked about modems, which is something I actually didn't even touch on in the book and don't really think of as "VoIP" or "UC"... However, they certainly are components of the larger network security area of concern.

If you enjoyed 7 Deadliest UC Attacks, you may also like the fiction book "Counting From Zero"

If you enjoyed the subject matter in my Seven Deadliest Unified Communications Attacks, you may enjoy the fiction book, Counting from Zero, written by my friend Alan Johnston. The book, available as an eBook from Amazon, Barnes & Noble, Smashwords and other sites, is not about Unified Communications or VoIP security, but rather about Internet security in general and specifically the rise of botnets and all their attendant troubles.

It's a story... about an Internet security researcher named Mick O'Malley who recognizes the signs of an impending global "zero day" attack via a massive botnet... and how he discovers it... how the various forces out there conspire against him... how he and his allies fight back...

I don't know how it ends, yet, as I'm only 2/3rds of the way through it, but I'm enjoying the story so far quite a good bit.

I've known Alan for a good number of years mainly through IETF and SIP-related connections including the SIP Forum... we routinely meet up at various conferences and these days of course connect through social networks. While Alan's written a number of technical books related to the SIP protocol, this is his first foray into fiction and on his new blog site he explains the journey that brought him into self-publishing and the world of ebooks. I commend him on taking the leap and I look forward to seeing how it goes.

I've thought, too, of pursuing the fiction route myself at times... if I go back a couple of years, one of the best presentations I've given on VoIP security was one where I did away with all the traditional ways of talking about security and instead told a story called "The Saga of SysAdmin Steve". The story hit all the points I would have covered anyway, but in a way that was much more engaging... was much more memorable by the attendees... and was much more fun as a presenter. The challenge, of course, is that such a presentation can take a great amount more time to create. But it's certainly been on my mind lately to do more presentations and perhaps even some writing along those lines.

Meanwhile, I congratulate Alan on the launch of "Counting from Zero" and encourage you all to check out the book's website and Alan's blog and, if you are so inclined, to purchase a copy. I'm definitely enjoying the read so far.

7 Deadliest UC Attacks Mentioned at Enterprise Connect

I've been very pleased by the comments I've received from people at the Enterprise Connect show this week in Orlando who have read the book. A couple of people mentioned they've bought it for the Kindle while at the show. And analyst Blair Pleasant mentioned the book a couple of times in one of her sessions (Thanks, Blair!).

As an author, it's wonderful to hear that the book is really helping people understand UC security issues.

Thanks again for all the kind words and mentions!