Seven Deadliest Unified Communications Attacks

Audio interview: Archive of PaulDotCom Security Weekly now available

As I mentioned previously, I was a live participant in episode 209 of the PaulDotCom Security Weekly last week. The show is now up online for listening:

http://pauldotcom.com/2010/09/pauldotcom---security-weekly---13.html

I come in after the first commercial break for about 20 minutes.

It was fun to do and I thank Paul for the opportunity to come on the show and talk about the book and unified communications security in general.

P.S. I can tell I did the interview late in the evening after a long day... please try NOT to count the number of "and... uh..."'s that I said at the beginning of the interview. :-(

---

If you found this post interesting or useful, please consider either:

• subscribing to my email newsletter;
• following me on Twitter; or
• subscribing to the RSS feed

---

Appearing LIVE on PaulDotCom Security Weekly tomorrow (Thurs, Sept 2) - you can join in!

Tomorrow night (Sept 2, 2010) I'll be appearing live as one of two guests on episode 209 of the PaulDotCom Security Weekly podcast . My part will be about a 15-20 minute segment toward the beginning where the crew will interview me about the book, UC Security, etc.  I'll then give the "Tech Segment" of the show where I'll talk about some of the specific tools that can be used to attack and defend Unified Communications systems. You can then stick around to hear Josh Wright from InGuardians discuss wireless security issues. Should be a good show!

We'll also be giving away a free copy of "Seven Deadliest Unified Communications Attacks" to one of the live listeners.

You can listen live - and potentially win the free copy of the book - by visiting the web page for the episode:

http://pauldotcom.com/2010/09/episode-209-with-dan-york-josh.html

You can watch the video streamed live from the PaulDotCom studio and also participate in the IRC chat room to ask questions, join in the discussion, etc.

The show will be recorded live on Thursday, September 2nd, 2010, starting at 7:30pm US Eastern time.

I will be remote, so I will not be seen in the live video stream you'll see on the web page.

The show will also be available for listening later.

Live shows are always "interesting" to do because there's no editing out mistakes...  if you're stumbling for an answer, well, everyone hears that!  You have to be really focused and on your game.  I find them fun to do, personally, but then again, I'm warped enough to have always enjoyed press conferences back when those kind of events were actually held. :-)

Come on over and join us tomorrow night - it should be fun!

---

If you found this post interesting or useful, please consider either:

• subscribing to my email newsletter;
• following me on Twitter; or
• subscribing to the RSS feed

---

Audio Interview: Protecting Unified Communications

Yesterday morning I had the pleasure of being interviewed by Carl Weinschenk about UC Security and the book.  The resulting interview is now available on his Unified Communications Edge blog for your listening:

Podcast: Protecting Unified Communications

Carl and I had a great discussion about what makes unified communications security different and what businesses need to do - or don't need to do - to prepare for securing UC systems. We also discussed some of the security advantages of UC and covered a range of related topics.

It was an enjoyable interview to do and I thank Carl for the opportunity to engage in the discussion!

---

If you found this post interesting or useful, please consider either:

• subscribing to my email newsletter;
• following me on Twitter; or
• subscribing to the RSS feed

---

Amazon Kindle version now available for "Seven Deadliest Unified Communications Attacks"

I'm very pleased to report that an Amazon Kindle version of Seven Deadliest Unified Communications Attacks is now available from the Kindle store.

I've had a good number of people ask me about a Kindle version... and it obviously makes a good degree of sense given that it's a technical book for a technical audience, many of whom may have e-readers.

I don't own a Kindle, but I do have both an iPad and an iPhone - and the Kindle reader is available for free for both of those - so I am looking forward myself to seeing my book on my iPad as an "e-book".

What about you all? Do you want to buy the book in paper/treeware form? Or do you want an ebook version?

Full disclosure for the FTC: The links to Amazon.com include my affiliate ID. If you buy the book after following the links, I may be paid a tiny bit of money.

---

If you found this post interesting or useful, please consider either:

• subscribing to my email newsletter;
• following me on Twitter; or
• subscribing to the RSS feed

---

Apparently, at least 7 Singaporeans are reading 7 Deadliest UC Attacks

As I've written previously, Google Alerts can be the source of amusing information for authors.  Today's curiosity was a link to the National Library Board of the Singapore Government where Seven Deadliest Unified Communications Attacks is apparently available for readers.  In fact, when I clicked on the link and then clicked on the book title, I got a page showing which libraries in Singapore have a copy and which copies are checked out:

Admittedly, this is kind of cool to see!  What is of course even more appropriate is that if you count up the number of copies "On Loan", the count is....  7! :-)

---

If you found this post interesting or useful, please consider either:

• subscribing to my email newsletter;
• following me on Twitter; or
• subscribing to the RSS feed

---

Broadvox Peer-to-Peer Blog reviews 7 Deadliest UC Attacks, promotes E-SBCs

As I mentioned previously, David Byrd of Broadvox provided one of the more unusual headlines I'd seen for a review, and true to his word in that piece, he did publish a post last week called simply, "The Seven Deadliest UC Attacks," where he gave a nice synopsis of the attacks covered in the book.

Thank you, David!

A few days later David published another post on his blog entitled "Combating the Seven Deadliest Attacks with an E-SBC" where he describes how an "Enterprise Session Border Controller" (E-SBC) can play a role in protecting your network from the attacks I outline in the book.  He goes on to quote Steve Johnson, president of Ingate Systems, who has become a friend over the years and with whom I often share the stage at Ingate's SIP Trunking workshops held in conjunction with ITEXPO events. (As we will again in October of this year.)

I'll be honest and say that it didn't really occur to me that the book would be used in the promotion of E-SBCs... but it makes a whole lot of sense and if I were in the marketing department of a E-SBC vendor it might very well be a linkage I'd promote.  (Hmmm... should I be reaching out to those vendors?  ;-) )

Thank you, again, David, for your kind words and for liking the book enough to promote it as you are.  Thank you.

---

If you found this post interesting or useful, please consider either:

• subscribing to my email newsletter;
• following me on Twitter; or
• subscribing to the RSS feed

---

Perhaps the oddest review headline: "Offal Is Not Awful, and the Seven Deadliest Attacks"

As an author, you naturally pay attention to reviews of your book, and so when Google Alerts delivered me this link, I wasn't sure what to think:

Peer-to-Peer Blog: Offal Is Not Awful, and the Seven Deadliest Attacks

I mean, what would my book have to do with offal?

It turns out, of course, that there was no connection whatsoever... but the author of the post, David Byrd of Broadsoft, seems to start many of his posts off talking about food! (Other examples here, here and here.) Hey, we all have our own style... :-)

Thanks, David, for the mention of the book, and for providing a chuckle with your headline. I have to say I would have never come up with the combination. I'll be curious to see what the headline may be for his follow-up post he mentions for Wednesday...

---

If you found this post interesting or useful, please consider either subscribing to the RSS feed, following me on Twitter or subscribing to my email newsletter.

---

Another great Amazon review of 7 Deadliest UC Attacks

I was very pleased to see another great review pop up on Amazon.com, this time from Jason Ostrom, who actually got to see the book before I did! (As seen in this photo from the InfoSec Europe 2010 conference.)

I definitely do appreciate any and all Amazon reviews - people do read those reviews and they do influence sales. If you have read the book, would you mind taking a moment and adding a review at Amazon.com? (Thanks)

---

If you found this post interesting or useful, please consider either subscribing to the RSS feed, following me on Twitter or subscribing to my email newsletter.

---

Interviewed on NoJitter.com about 7 Deadliest UC Attacks

Last week I spoke with Eric Krapf, lead editor of the No Jitter site, about the book and this week he published a very nice article: "Interview: Dan York and the 7 Deadliest UC Attacks" In the article, he recaps the 7 areas of attack I outline in the book, links to articles on No Jitter that support some of the attacks... and also says some very kind things about me.

Thanks, Eric, for your kind words and for writing this article.

Archive of VoIP User Conf interview about UC security now available

The archive of the audio interview I gave on May 21st to the VoIP Users Conference (VUC) is available at:

http://www.voipusersconference.org/2010/7-deadliest-uc-attacks/

You can either download the MP3 for later listening or play the show directly in the browser.

It was an enjoyable show that went for pretty much the entire hour.  We talked about the Seven Deadliest Unified Communications Attacks book, UC and VOIP security in general... and, well... a good number of other interesting side topics.  I think you'll find it an enjoyable listen.

Many thanks to Randy and the whole VUC gang for the chance to go on the show and talk about the book.