VOIP Pen Testing
VoIP penetration testing determines the risk of a VoIP attack. Although VoIP technology corresponds to current business needs, it may introduce additional risks such as call tracking, call data manipulation, listening or unauthorized wiretapping of phone calls.
It includes assessing the VoIP infrastructure and determining the risks of an internal or remote network infrastructure attack. We evaluate the different VoIP components from a security perspective and their capability to maintain the confidentiality, integrity and availability of the environment and related traffic.
Our testing generally includes investigating the authentication mechanisms, as well as the potential interception, interruption or manipulation of the exchanged information between the client and VoIP server.
SERVICES OFFERED INCLUDE
Recreate customer VoIP implementations
Comprehend VoIP configurations and Network designs
Physical voice port access checks
Traffic Capture and Eavesdropping
Caller Id Spoofing
Identify Denial of Service (DoS) vulnerabilities
OUR APPROACH
Internal VoIP Assessment
Testing VoIP Call Requirements
Testing VLAN Configuration,
Network Design, and QoS requirements
Gaining access to physical voice port
Gaining access into Voice VLAN
Determine degree of risk of internal attacks from same VLAN
Determine degree of risk of internal attacks from other VLANs
Remote VoIP Assessment
Testing VoIP Call Requirements
Testing remote VoIP call requirements
Determine degree of risk of external attacks
What are the deliverables?
At the end of the project, the client receives the following:
1.Executive report -
which is an easy to follow few page report that includes bird eye view of complete penetration testing, list of the findings and a short explanation of the security fixes or mitigation techniques.
2. Technical report - which includes the following sections:
1. Introduction
2. Methodology
3. Findings and recommendations
Each finding that is considered a security threat includes:
1. A description of the security issues as it affects the target system
2. Our assessment of the impact of the vulnerability
3. Details on how to reproduce the issue found
4. Solutions and recommendations, which are tailored for the target audience and can go into quite some detail
WHAT DO WE PROMISE?
TechSaints International employs a wide variety of tools and techniques to carry out penetration testing. Each and every test is carried out by skilled security testers and the results are manually verified before communicating to you. The end result is you get comprehensive and accurate understanding of your security posture and can immediately take mitigating steps for closing any identified weakness.