VoIP hasn't been one that has received a great deal of attention when it comes to cyber security. There are still some who will say that the only thing you need VoIP for is making calls, but anyone who has seen their bandwidth usage knows better.

The sudden surge of popularity that was enjoyed by the internet saw an influx of applications designed to allow you to do just about anything on your computer or mobile device. You can now do all manner of things that were not possible back in the dial-up days. One such thing is choosing VoIP.

Using a VoIP provider gives you more of a measure of security than using your computer alone would. The way that you use VoIP is different than the way you place a phone call, and this makes it more secure because of the risk posed by vishing and other forms of voice phishing.

Why VoIP security matters

Security is essential to every business and VoIP is no different. VoIP is a relatively new technology, but it is already being used by many businesses of all sizes. If your business doesn't yet use VoIP there would be only one reason why you wouldn't want to: no one told you about it!

Many applications can now run over the internet, and when you run them over the internet you make yourself vulnerable to hacking and other security breaches. Anything that runs on a computer or mobile device can be hacked and used against you by people with less than good intentions.

The problem with VoIP: an open system

Many VoIP services use open systems, which means that everyone can see what is going on with them. This includes the location of all users, and anyone who can gain access to this information will know where you are physically located as well as any details they would need to begin an attack on your VoIP system.

VoIP security: choosing a provider

When it comes to selecting a VoIP provider there are some things that you should look out for, including encryption. If you don't encrypt your data then it is more than likely that someone will find a way to hack into it and use it against you.

With the help of VoIP, attackers can perform attacks such as:

• Through phone calls, social engineers manipulate people.
• Passwords for internal Wi-Fi networks are revealed.
• Calling expensive numbers (toll fraud).
• Text messages containing multi-factor authentication can be intercepted.
• Obtaining unauthorized access to data networks under false pretenses.

How does VoIP impact network security?

VoIP systems are also vulnerable to malicious services gaining a foothold on a system and where they can cause damage by accessing critical data resources. A malicious surfer may also have the ability to install spyware, Trojans, worms, adware, or viruses that will eventually lead to their being able to access your secure networks from inside.

With many VoIP systems including features such as virtual paging, the ability to record calls, and other features that were previously only available on expensive PBX telephone systems, it is important that you make sure your VoIP provider has secure data transmission.

Can VoIP calls be tapped?

Depending on the provider, tapping a VoIP call is relatively easy to accomplish. Some services will give you that ability by simply adding a few lines of code into their software. You can find providers who claim to encrypt the calls, but many people are still skeptical about whether or not it really happens without human intervention because encryption means that they cannot see your data.

VoIP security tools

Encryption at both ends using 256-bit encryption with 3DES. If you have encrypted data at both ends, the only way to discover the content of your calls would be for someone to access your hard drive while it is in use. This means that if someone wants the contents of what you are saying over VoIP, they will have to get into your computer first. Using 256-bit encryption with 3DES is good, but it can be broken. Without using any other measures, this could enable someone to break through the encryption and hear your conversations over VoIP. PBXs should not use regular phone lines as outgoing calls are still unencrypted.