VIPER Lab

Test and Verify OCS Security with OAT

At Voicecon 2009 in Orlando this week Sipera Systems announced a new free tool for assessing unified communications and VoIP security. The OCS Assessment Tool, dubbed OAT, is available as a free download from Sourceforge.

According to the OAT download site, Sipera’s “VIPER Lab created OAT because OCS and other Microsoft products are frequently being used as part of a unified communications infrastructure in many enterprises. Our mission is to help IT manager and security practitioners evaluate the security architecture of their deployments and ensure that their mission-critical communications and systems are protected.”

OAT starts off with a dictionary attack against a known user. Once the password is determined, OAT can run a variety of UC / VoIP attacks against the OCS environment. OAT can be run internally, as if an authorized user is performing malicious or unauthorized activities, or as an external attack against OCS. OAT can perform the following functions:

• Online Dictionary Attack
• Presence Stealing
• Contact List Stealing
• Single User Flood Mode (Internal)
• Domain Flood Mode (Internal)
• Call Walk (Internal/External)
• Play Spam Audio
• Detailed Report Generation

Follow me on Twitter

BCI Chooses Sipera for UC Security

Chile-based Banco de Credito e Inversiones (BCI) has chosen Sipera to secure their unified communications infrastructure. Using Sipera’s IPCS unified communications security appliances provides BCI with real-time unified communications security backed by the research and expertise of Sipera’s VIPER Lab.

Sipera also enables BCI to leverage more cost-effective SIP trunking rather than relying on trunk lines, and allows BCI to deploy unified communications more efficiently and provides quality of service monitoring and reporting that BCI didn’t previously have. You can learn more about Sipera unified communications security appliances and services at Voicecon in Orlando this week. Sipera is at Booth 1500.

Follow me on Twitter

Is Your UC Secure?

In order to provide comprehensive security, all traffic going into and out of the network should be monitored. Security applications and appliances have to scan and monitor for malware, data leakage, and other threats. With Unified Communications, the threat landscape is a little bigger and a little different. It is as important as ever to monitor traffic and maintain security, but unified communications demand higher bandwidth and QoS (Quality of Service) requirements than standard data traffic, making it an even greater challenge to secure and protect a UC environment while maintaining voice quality. Join Jason Ostrom, Director of the Sipera VIPER Lab, and Eric Winsborrow, Chief Marketing Officer for Sipera Systems and moderator, Erik Lanask, Group Managing Editor at Technology Marketing Corporation, on Tuesday, July 22 at 11:00am ET/ 8:00am PT.