Fake MicroSoft calls Post: 303011432

Sponsored Content

Special Forums Cybersecurity Fake MicroSoft calls Post 303011432 by Neo on Thursday 18th of January 2018 08:17:32 AM

01-18-2018

Administrator

I recall VoIP vulnerabilities over the years and for many years.

On another note, it is always important to keep in mind that (IT) RISK is the intersection of VULNERABILITY, THREAT & CRITICALITY.

So, even if there is a VULNERABILITY, if there is no real THREAT or CRITICALITY, then RISK is LOW.

For example, for someone who uses VoIP and is not a high profile person or spy or criminal etc who has THREATS and if a VULNERABILITY is exploited, it does not do critical harm (in the case of VoIP threats for most people who use VoIP daily), then the RISK is low.

I've been aware of possible VoIP exploits for many years, but it does not stop me from using the myriad technologies that use VoIP. This especially applies to VoIP technologies which are encrypted. LINE, What's App and I believe Skype are all encrypted and so exploiting these VoIP vulnerabilities are non trivial, as I recall, and so most users who use encrypted VoIP are not at high RISK.

There is also the RISK MITIGATION model, which combines TECHNICAL (LOGICAL) CONTROLS, PHYSICAL CONTROLS AND ADMINISTRATIVE CONTROLS, should be considered as well

Encrypting a VoIP channel is a TECHNICAL CONTROL and having a policy whereas HIGHLY SENSITIVE USERS do not use these apps unless approved is an ADMINISTRATIVE CONTROL.

It is important to keep in mind that RISK MANAGEMENT and RISK MITIGATION is a multidimensional and multifaceted approach, so VULNERABILITIES must be viewed in context to the THREAT and CRITICALITY; and RISK MITIGATION must be viewed in terms of RISK and the "best" combination of controls (ADMIN, TECH, PHYSICAL) based on RISK (and this implies budget as well).

Cheers.

This User Gave Thanks to Neo For This Post:

Neo

View Public Profile for Neo

Visit Neo's homepage!

Find all posts by Neo

2 More Discussions You Might Find Interesting

1. IP Networking

Identification of data calls & voice calls

Is there any facility to filter/identify the data calls and voice calls coming throug modem? OR Can we get the data or voice calls information through a script(preferably C Kermit)?

2. Windows & DOS: Issues & Discussions

Microsoft Powerpoint 2003 stops working after 12 April 2011 Microsoft Updates

For the benefit of the community this is a widespread worldwide problem affecting multiple versions of Microsoft Windows. Powerpoint erroneously reports Powerpoint presentation damaged and then often hangs. Until Microsoft sort this out, try removing Powerpoint security update KB 2464588...

LEARN ABOUT DEBIAN

netsds

NetSDS(3pm)						User Contributed Perl Documentation					       NetSDS(3pm)

NAME

       NetSDS - Service Delivery Suite by Net Style

DESCRIPTION

       "NetSDS" is a flexible framework for rapid software development using the following technologies:

       Perl5 - default programming language
       PostgreSQL - default DBMS
       MemcacheQ - message queue manager
       Apache - HTTP server with FastCGI support
       Kannel - SMS and WAP gateway
       Asterisk - VoIP / telephony applications
       Mbuni - MMSC and MMS VAS gateway

COMPONENTS

       o   NetSDS::Class::Abstract - abstract class for other NetSDS classes.

       o   NetSDS::App - common application framework class.

       o   NetSDS::App::FCGI - FastCGI applicatrion framework

       o   NetSDS::App::JSRPC - JSON-RPC server framework

       o   NetSDS::Conf - configuration files management class.

       o   NetSDS::Logger - syslog API.

       o   NetSDS::DBI - DBI wrapper for DBMS integration.

       o   NetSDS::DBI::Table - SQL table data processing API.

       o   NetSDS::EDR - writing event detail records (EDR).

SEE ALSO

       <http://www.netstyle.com.ua> - Net Style Ltd. Company that develops NetSDS.
       <http://netsds.sourceforge.net/> - NetSDS page at SourceForge
       <http://www.asterisk.org> - Asterisk IP PBX
       <http://www.kannel.org> - Kannel WAP/SMS gateway
       <http://www.mbuni.org> - Mbuni MMSC and MMS VAS gateway
       <http://www.postgresql.org> - PostgreSQL object-relational DBMS

AUTHORS

       Michael Bochkaryov <misha@rattler.kiev.ua>

THANKS

       Valentyn Solomko <pere@pere.org.ua> - for Wono project

LICENSE

       Copyright (C) 2008-2009 Net Style Ltd.

       This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by
       the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

       This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.

       You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation,
       Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

perl v5.10.1							    2010-04-28							       NetSDS(3pm)