Practical VoIP Security

This book is divided into four parts. Part I begins with several chapters on the basics of Skype. Here the reader learns how to install and configure Skype on several platforms including Windows, Max OSX, Linux, and PocketPC. The reader will also learn how to begin making voice over IP calls immediately. Part II deals with the more advanced features of Skype. Here the reader learns how to use Skype on new “Skype Ready” cell phones, use Skype for more advanced, business-oriented tasks such as scheduling and file transfers, as well as using SkypeOut. Part III discusses how to integrate Skype with third party networking, communication, and security devices such as routers, firewalls, and mail servers, as well as using the brand new Skype for Business. Part IV covers the Skype Application Programming Interface, Plug-ins, Add-ons, and third party tools. Here the reader learns to develop and customize their own applications using the new, powerful, Skype API. * Skype has over 70,000,0000 users worldwide, and 13 forums with over 25,000 members * Skype's Application Programming Interface (API) allows users to develop their own applications and customize Skype with the information found in this book * Makrus Daehne is one of the most recognized and respected authorities on Skype and he is the forum moderator on the Skype Web site Издательство Syngress Publishing, 2006. - 592 p. The business of securing our private data is becoming more important and more relevant each day. The benefits of electronic communication come with proportionate risks. Critical business systems can be and are compromised regularly, and are used for illegal purposes. There are many instances of this: Seisint (Lexis-Nexis research), Choicepoint, Bank of America, PayMaxx, DSW Shoe Warehouses, Ameriprise, and T-Mobile are all recent examples. Victims of personal data security breaches are showing their displeasure by terminating relationships with the companies that maintained their data, according to a new national survey sponsored by global law firm White & Case. The independent survey of nearly 10,000 adults, conducted by the respected privacy research organization Ponemon Institute, reveals that nearly 20 percent of respondents say they have terminated a relationship with a company after being notified of a security breach. Companies lose customers when a breach occurs. Of the people we surveyed who received notifications, 19 percent said that they have ended their relationship with the company after they learned that their personal information had been compromised due to security breach. A whopping 40 percent say that they are thinking about terminating their relationship, said Larry Ponemon, founder and head of the Ponemon Institute. The practice of information security has become more complex than ever. By Gartner’s estimates, one in five companies has a wireless LAN that the CIO doesn’t know about, and 60 percent of WLANs don’t have their basic security functions enabled. Organizations that interconnect with partners are beginning to take into account the security environment of those partners. For the unprepared, security breaches and lapses are beginning to attract lawsuits. It’s going to be the next asbestos, predicts one observer. The daily challenges a business faces—new staff, less staff, more networked applications, more business partner connections, and an even more hostile Internet environment— should not be allowed to create more opportunities for intruders. The fact is, all aspects of commerce are perilous, and professional security administrators realize that no significant gain is possible without accepting significant risk. The goal is to intelligently, and economically, balance these risks. This book is based on the premise that in order to secure VoIP systems and applications, you must first understand them. In addition, efficient and economical deployment of security controls requires that you understand those controls, their limitations, and their interactions with one another and other components that constitute the VoIP and supporting infrastructure. Introduction to VoIP Security Asterisk Configuration and Features The Hardware Infrastructure PSTN Architecture H.323 Architecture SIP Architecture Other VoIP Communication Architectures Support Protocols Threats to VoIP Communications Systems Validate Existing Security Infrastructure Confirm User Identity Active Security Monitoring Logically Segregate Network Traffic IETF Encryption Solutions for VoIP Regulatory Compliance The IP Multimedia Subsystem: True Converged Communications Recommendations

this Book Is For System Administrators And Security Professionals Who Need To Bring Now Ubiquitous Im And P2p Applications Under Their Control. Many Businesses Are Now Taking Advantage Of The Speed And Efficiency Offered By Both Im And P2p Applications, Yet Are Completely Ill-equipped To Deal With The Management And Security Ramifications.

these Companies Are Now Finding Out The Hard Way That These Applications Which Have Infiltrated Their Networks Are Now The Prime Targets For Malicious Network Traffic. This Book Will Provide Specific Information For It Professionals To Protect Themselves From These Vulnerabilities At Both The Network And Application Layers By Identifying And Blocking This Malicious Traffic.

* A Recent Study By The Yankee Group Ranked Managing And Securing Im And P2p Applications As The #3 Priority For It Managers In 2004

* The Recently Updated Sans/fbi Top 10 List Of Vulnerabilities For Computers Running Microsoft Windows Contained Both P2p And Im Applications For The First Time

* The Recently Released Symantec Threat Assessment Report For The First Half Of 2004 Showed That 19 Of The Top 50 Virus Threats Targeted Im Or P2p Applications. Despite The Prevalence Of Im And P2p Applications On Corporate Networks And The Risks They Pose, There Are No Other Books Covering These Topics

in Summary, The Book Is An Easy Read, Not Overly Technical But Yet Providing Detail For The Reader To Get A Good Grounding In These Communication Techniques. There Are Some Useful References Sprinkled Throughout That Could Be Useful For The Reader. I Liked The Book And Felt That I Learned More About Instant Messaging (im) And Peer-to-peer Networks (p2p)than I Ever Knew Before. From My Point Of View It Was Very Illuminating.-science Digest, H. Wolfe, University Of Otago, Information Science Dept

Umer Khan's first book, "Cisco Security Specialist's Guide to PIX Firewalls," ISBN: 1931836639, has consistently maintained its spot as the #1 best-selling PIX book on amazon.com by providing readers with a clear, comprehensive, and independent introduction to PIX Firewall configuration. With the market for PIX Firewalls maintaining double digit growth and several major enhancements to both the PIX Firewall and VPN Client product lines, this book will have enormous appeal with the audience already familiar with his first book.

* The Cisco Pix firewall is the #1 market leading firewall, owning 43% market share. Cisco is poised to release the newest, completely re-designed version 7 of the Pix operating system in the first quarter of 2004.

* "Cisco Pix Firewalls: configure | manage | troubleshoot" Covers all objectives on the new Cisco Pix certification exam, making this book the perfect study guide in addition to professional reference.

* Umer Khan's first book "Cisco Security Specialist's Guide to PIX Firewall" has been the #1 market leading Cisco Pix book since it was published in 2002.

Umer Khan's first book, "Cisco Security Specialist's Guide to PIX Firewalls," has consistently maintained its spot as the #1 best-selling PIX book on amazon.com by providing readers with a clear, comprehensive, and independent introduction to PIX Firewall configuration. With the market for PIX Firewalls maintaining double digit growth and several major enhancements to both the PIX Firewall and VPN Client product lines, this book will have enormous appeal with the audience already familiar with his first book

This completely updated bestseller covers Cisco PIX Security Appliance Software Version 7.0, as well as the entire family of Cisco PIX 500 Series Firewalls. The book clearly explains how to leverage the integrated remote access and site-to-site VPN capabilities found in PIX Firewalls. It also illustrates how to securely extend your network to tele-workers, remote and satellite offices, business partners, suppliers, and customers. The authors thoroughly document all enhancements to PIX 7.0, including virtual LAN (VLAN)-based virtual interfaces, OSPF Dynamic Routing over VPNs, Secure Hypertext Transfer Protocol (HTTPS) Authentication Proxy, Local User Authentication Database for Network and VPN Access, Advanced Encryption Standard (AES), Support for VPN Accelerator Card+ (VAC+), DHCP Server Support on Multiple Interfaces. Special attention is paid to intrusion protection configuration. Instant Messaging (IM) and Peer-to-Peer (P2P) applications are taking over the workplace as P2P transfers now account for 70% of all Internet traffic and more than 50% of corporate workstations are running an IM application. IT professionals face the challenge of managing and securing these applications, which last year were the point of entry into corporate networks for 40% of all computer viruses and worms. This book is for system administrators and security professionals who need to bring now ubiquitous IM, P2P, and IRC applications under their control. It provides specific protection strategies for the network and application layers by identifying and blocking malicious traffic.