|
VoIP SECURITY TAXONOMY |
|
|
|
Written by Adam Gosling
|
|
Tuesday, 25 October 2005 |
The Voice over IP Security Alliance (VOIPSA) has release what ti claims is a comprehensive description of security and threats.
The VoIP Security Threat Taxonomy project, began in March and includes the following elements:
• Core definitions that give specific meaning to privacy and security
• A framework that effectively connects public policy and technology issues
• Recognition of the human element in threats as distinct from their technical means
• Specific sets of issues for consideration by legislative bodies and by law enforcement
• A detailed structure for technical vulnerabilities across the value chain
While it is a work in progress, Jonathan Zar, Secretary and Outreach Chair for VOIPSA, head of the taxonomy project and Senior Director for SonicWALL said the results published today provide an effective framework with which to inform the press, the policy community and other projects within VOIPSA including:
“The importance of this accomplishment is that it gives a foundation to all future discussions on VoIP security that are both technically and socially informed. Until now, the public has been uncertain about the various threats, how risks related to each other and technical trade-offs. This is fundamental to all future work in the field.” He said
David Endler, Chairman of VOIPSA and Director of Security Research for 3Com’s TippingPoint division, said: "Since VOIPSA’s launch earlier this year, we've come a long way in gaining support throughout the VoIP and security industries. This first project puts security in context, and gives unique clarity to the challenges ahead. The Taxonomy Project is a significant accomplishment and will help shape the future work of VOIPSA and the industry. We expect to deliver the results of our next project, a list of security requirements, by the end of the year."
VOIPSA was formed in February this year and now has a membership which exceeds 100 organisations representing the entire value chain for VoIP. These include major carriers, software companies, equipment vendors, large users and system integrators.
Recent additions to the membership list include Juniper, Nokia, Deloitte & Touche and BearingPoint.
There is a discussion list going on here if you want to get involved.
www.voipsa.org.
Related news items Newer news items
Older news items
|
|
|
|
