Labs, Lectures, and 2 jammed packed days...PLUS, 5 online class sessions.

VoIP deployments are entering the enterprise at a rapid rate every day.  Many industry leaders are considering the advantages of data and telecommunications convergence, but have overlooked the concept of adequate security and vulnerability issues which comes with deployment.  Every segment of the market and every technology professional will find themselves in need of a greater understanding of VoIP and the tools to keep the network safe from intruders.

We have partnered with Salare Security to offer the industry’s only comprehensive VoIP Security Boot Camp.                         

What you will receive:

• 3 hours of Pre Course Online Webinar training.
• Self Study Kit containing over 1000 pages of critical reading.
• 2 days of hard hitting Hands-on Labs.
• 2 hours of Post Course Online Webinar training.
• Certification of completion.

What you will learn:

• Understand VoIP technology from top-to-bottom.
• Get clear view of the vulnerabilities of IP-based voice service, how they vulnerabilities are exploited and how the vulnerabilities can be mitigated or remediated. 
• Conduct you own VoIP security assessment the very next day.

Who should attend:

• Data Security Professionals that need to know about voice and handle voice security.
• Voice Professionals that need to understand Data Security Issues and how they interact with VoIP.

Unique critical content

• Auditing and risk assessment for VoIP – A Guide based on the Internet Security Alliance’s VoIP Security Project’s VoIP Threat Risk Analysis.
• VoIP and covert channels – Special focus on an area of greatly increasing concern to US-CERT – the use of VoIP transmissions to bypass data network security measures.
• Open source VoIP tools

EXAMPLE COURSE SCHEDULE:

Pre Course Online Webinar Dates:

May 4         10:30-11:30 CST
May 5         10:30-11:30 CST
May 7         10:30-11:30 CST

Boot Camp Dates:

May 10 & 11

Post Course Online Webinar Dates:

May 17       10:30-11:30 CST
May 18       10:30-11:30 CST

For More Information:
Debby Fairchild
636-485-3895
dfairchild@ip3inc.com

Pre Course Online Webinar Dates:

VoIP Security 2 Day Boot Camp Course Outline

Day 1

• First Half Day – Foundation of VoIP

1. History of Telephony (Lecture)
2. Asterisk IP-PBX (Lab)
1. Overview
2. Installation
3. Step-up
3. Configure X-lite Soft Phones (Lab)
4. SIP Protocol (Lecture + Lab)

• Second Half of Day – Broad VoIP Security Issues

1. VoIP Security Overview
2. External Attacks on VoIP Systems
1. How do VoIP Systems connect with the External World
2. How are VoIP Systems Vulnerable to external attack
3. Some Example Exploits
   1. Exposed Cisco Phones (lab)
   2. Exposed Snom Phones (lab)
3. Caller ID Spoofing
1. How does Caller ID work in the PSTN
2. How does Caller ID work with VoIP
3. What are vulnerabilities with VoIP Caller ID
4. How Does Caller ID Spoofing works
   1. PSTN
   2. VoIP
      
5. The Severity of Caller ID Spoofing … The Risk Impact
6. Exploits using Caller ID Spoofing
1. vhishing
2. swatting
3. voice mail access
4. credit card activation
7. Defending against Caller ID Spoofing
4. Call Redirection
1. How Call Redirection Works
1. PSTN
2. VoIP
2. Vulnerability of VoIP to Caller Redirection
3. Severity of Call Redirection … The Risk Impact
4. Exploits Using Call Redirection
   
1. Registration Hijacking 
2. ARP Poison Redirect

Day 2

• First Half of Day - Major VoIP System Components

1. VLANs
1. VLAN Overview
2. VLAN Exploits (Non-lab based)
2. TFTP Servers
1. Overview of TFTP and its use with VoIP Systems
2. Install and Configure a TFTP Server
3. Register Cisco IP Phone with TFTP Server
4. Use UCsniff/VoIPhopper to spoof the Cisco IP Phone
3. Session Border Controllers and VoIP Aware Firewalls
1. Overview of Firewall Evolution
2. SBC function

• Second Half of Day -  IP PBX features and Attacks of the IP-PBX and User Agents

1.  IP-PBXs
1. Major Functions
1. Registrar
2. Location Server
3. Proxy
2. Other Functions
1. Voice Mail
2. Conference Services
3. Configure voice mail on Asterisk
4. Configure Conference Services on Asterisk
2. DOS attacks on IP-PBX
1. INVITE Flood
2. REGISTER Flood
3. DOS attacks on Phones
1. SIP Bye
4. VoIP Media
1. Overview of RTP/SRTP, Media Gateways, Codecs, UDP issues
2. Media Exploits
1. Sound Injection
2. Sound Mixing
3. Vunneling
4. SPIT

Post Course Online Webinar Dates:

May 17, 2010                          10:30-11:30 CST

Assessing the Security of a VoIP Network

Get the basic knowledge and a list of questions that you need to answer as you begin to assess the security of your very own VoIP system.

May 18, 2010            10:30-11:30 CST

Implementing Security on a VoIP Network

Understand the major controls that are necessary to properly manage the risks present in a VoIP Network.