VoIP deployments are entering the enterprise at a rapid rate every day.  Many industry leaders are considering the advantages of data and telecommunications convergence, but have overlooked the concept of adequate security and vulnerability issues which comes with deployment.  Every segment of the market and every technology professional will find themselves in need of a greater understanding of VoIP and the tools to keep the network safe from intruders.

  We have partnered with one of the leading VoIP Security providers, Salare Security and the VoIP Labs at the Illinois Institute of Technology to offer the Industry’s only Comprehensive VoIP Security Boot Camp.                         

What you will receive:

• 3 hours of Pre Course Online Webinar training.
• Self Study Kit containing over 1000 pages of critical reading.
• 2 days of hard hitting Hands-on Labs.
• 2 hours of Post Course Online Webinar training.
• 120GB Apple iPod Classic or an 8GB iPod Touch loaded with valuable content from our VoIP Security Library.
• Certification of completion.

What you will learn:

• Understand VoIP technology from top-to-bottom.
• Get clear view of the vulnerabilities of IP-based voice service, how they vulnerabilities are exploited and how the vulnerabilities can be mitigated or remediated. 
• Conduct you own VoIP security assessment the very next day.

Who should attend:

• Data Security Professionals that need to know about voice and handle voice security.
• Voice Professionals that need to understand Data Security Issues and how they interact with VoIP.

Unique critical content

• Auditing and risk assessment for VoIP – A Guide based on the Internet Security Alliance’s VoIP Security Project’s VoIP Threat Risk Analysis.
• VoIP and covert channels – Special focus on an area of greatly increasing concern to US-CERT – the use of VoIP transmissions to bypass data network security measures.
• Open source VoIP tools

Location:    Illinois Institute of Techno

logy (Rice Campus)
                  201 E. Loop Rd., Wheaton, IL 60189

Pre Course Online Webinar Dates:

February 11, 2010         10:30-11:30 CST
February 16, 2010         10:30-11:30 CST
February 18, 2010         10:30-11:30 CST

Boot Camp Date:

February 22-23, 2010

Post Course Online Webinar Dates:

March 9, 2010               10:30-11:30 CST
March 11, 2010             10:30-11:30 CST

Register now! Seats are filling fast:

VoIP Security Boot Camp with iPod             $1,795

VoIP Security Boot Camp w/o an iPod         $1,595

Be sure to ask about our Group and Association discounts.

To reserve your seat today contact:

Debby Fairchild
Phone: 636-485-3895 | dfairchild@ip3inc.com

IP3, Inc.
1320 N. Michigan Ave., Suite #6
Saginaw, MI 48602
1-800-473-5181

Pre Course Online Webinar Dates:

VoIP Security 2 Day Boot Camp Course Outline

Day 1

• First Half Day – Foundation of VoIP

1. History of Telephony (Lecture)
2. Asterisk IP-PBX (Lab)
1. Overview
2. Installation
3. Step-up
3. Configure X-lite Soft Phones (Lab)
4. SIP Protocol (Lecture + Lab)

• Second Half of Day – Broad VoIP Security Issues

1. VoIP Security Overview
2. External Attacks on VoIP Systems
1. How do VoIP Systems connect with the External World
2. How are VoIP Systems Vulnerable to external attack
3. Some Example Exploits
   1. Exposed Cisco Phones (lab)
   2. Exposed Snom Phones (lab)
3. Caller ID Spoofing
1. How does Caller ID work in the PSTN
2. How does Caller ID work with VoIP
3. What are vulnerabilities with VoIP Caller ID
4. How Does Caller ID Spoofing works
   1. PSTN
   2. VoIP
      
5. The Severity of Caller ID Spoofing … The Risk Impact
6. Exploits using Caller ID Spoofing
1. vhishing
2. swatting
3. voice mail access
4. credit card activation
7. Defending against Caller ID Spoofing
4. Call Redirection
1. How Call Redirection Works
1. PSTN
2. VoIP
2. Vulnerability of VoIP to Caller Redirection
3. Severity of Call Redirection … The Risk Impact
4. Exploits Using Call Redirection
   
1. Registration Hijacking 
2. ARP Poison Redirect

Day 2

• First Half of Day - Major VoIP System Components

1. VLANs
1. VLAN Overview
2. VLAN Exploits (Non-lab based)
2. TFTP Servers
1. Overview of TFTP and its use with VoIP Systems
2. Install and Configure a TFTP Server
3. Register Cisco IP Phone with TFTP Server
4. Use UCsniff/VoIPhopper to spoof the Cisco IP Phone
3. Session Border Controllers and VoIP Aware Firewalls
1. Overview of Firewall Evolution
2. SBC function

• Second Half of Day -  IP PBX features and Attacks of the IP-PBX and User Agents

1.  IP-PBXs
1. Major Functions
1. Registrar
2. Location Server
3. Proxy
2. Other Functions
1. Voice Mail
2. Conference Services
3. Configure voice mail on Asterisk
4. Configure Conference Services on Asterisk
2. DOS attacks on IP-PBX
1. INVITE Flood
2. REGISTER Flood
3. DOS attacks on Phones
1. SIP Bye
4. VoIP Media
1. Overview of RTP/SRTP, Media Gateways, Codecs, UDP issues
2. Media Exploits
1. Sound Injection
2. Sound Mixing
3. Vunneling
4. SPIT

Post Course Online Webinar Dates:

March 9, 2010                          10:30-11:30 CST

Assessing the Security of a VoIP Network

Get the basic knowledge and a list of questions that you need to answer as you begin to assess the security of your very own VoIP system.

March 11, 2010            10:30-11:30 CST

Implementing Security on a VoIP Network

Understand the major controls that are necessary to properly manage the risks present in a VoIP Network.