You need SIP security either on-premise or in the cloud
So what are the real risks associated with a SIP trunk? What are the possible exploits? The number of attacks keeps rising and the sophistication ranges from simple to sophisticated. Two of the most troubling are toll fraud and distributed denial-of-service (DDoS) attacks. Toll fraud occurs when someone or some computer gains access to the PBX via the SIP trunk places outgoing calls …. on the company’s nickel. Without proper protection this is a fairly easy exploit. All it requires is the spoofing of a softphone on a system that has weak authentication.
DDoS is a more sophisticated attack. With DDoS the PBX is overwhelmed by inbound traffic. There are multiple means to achieve DDoS. For example a SIP flood is a series of inbound call request, each depleting call handling resources. Given enough requests the PBX becomes unusable – a denial of service. Another approach is to flood the PBX with malformed packets. The result is the same as the PBX bogs down while attempting to process each packet. These are just two of many DDoS attacks. The bottom line is you need SIP security either on-premise or in the cloud.
