Fuzzing DTMF Input Processing Algorithms presented at ekoparty 2012

by Rahul Sasi,

Summary : Our paper would be on DTMF input processing algorithms [DSP], That Are Often embed into PBX, IVR, routers and other devices Telephone That process DTMF input. PBX and IVR servers are running Often deployed for Phone Banking App Servers, Call Center and other systems Application That Uses phone to Interact with them. If an attacker Could trigger exception in DTMF processing algorithms, Then They Could The entire application server crash making a single phone call, Phone Causing The entire banking in accessible, or no calls to the costumer service goes through. One such Denial of Service could cause a lot of panic and the amount of damage would be pretty huge. We will be demonstrating remote DTMF lot of amusing attacks on Phone Banking, Tele-voting, and Customer Support using DTMF applications. This talk is recommended for pentesters, PCI | DSS consultants, Telephone Companies, Banks or anyone who uses a device interacted via Telephone.