VoIP Phreaking: How to Make Free Phone Calls and Influence People presented at BlackHatAsia 2005

by The Grugq,

Summary : The recent explosion in internet telephony has led to the exposure of the (previously) closed Public Service Telephone Network (PSTN) to the wilds of the internet. Voice over IP (VoIP) technology, particularly when coupled with the PSTN, presents new and interesting security challenges, many of which are completely ignored until after deployment. These security issues, such as new avenues for fraud, present serious risks to tradition telephony companies, companies which need to trust the phone system, and ordinary consumers. This talk explores the technologies behind VoIP infrastructures, focusing on their weaknesses and faults. Live demos will help illustrate that attacks which violate VoIP system security are not only practical, but are already here. The era of VoIPhreaking has begun.