SIP
Only one-third of those adopting SIP trunking have a strategy for security, Nemertes finds. Vulnerabilities for SIP trunks are significant, ranging from PBX toll fraud to sophisticated denial of service attacks and violation of compliance with privacy regulations, such as the Payment Card Industry Digital Security Standard (PCI-DSS) and Gramm-Leach-Bliley Act (GLBA). Just as a firewall is standard Internet protection SIP security should too be standard; firewall, secure gateway and/or SIP trunk service provider. Invest in SIP trunking security approaches based on your risk mitigation needs. Work closely with your vendors and service providers to understand the risks, threats, and potential approaches to securing SIP trunking links.
