VoIP Security Tools

I'm a strong defender of how important is to know the vulnerabilities, hacking techniques and tools available for any technology in order to provide effective and efficient countermeasures and security solutions (remember: protect, detect and react).

VOIPSA's VoIP Security Tool List, of which I've been an occasional contributor/reviewer, has been finally published this month. The Black Bag Security Briefing (90-minute recording), available from the BlueBox Podcast, details some of the current VoIP threats, tools and best practices. Additionally, Backtrack v2 Final contains a few of these VoIP security tools, ready to go.

This is one of the best VoIP security resources available today, together with VOIPSA's VoIP Security Threat Taxonomy and US NIST's Security Considerations for Voice Over IP Systems. There are also a couple of mailing lists, VOIPSA's VOIPSEC and Voptalk, the VOIPSA blog, and my two favorite VoIP security books:

• "Practical VoIP Security". Thomas Porter.
• "Hacking Exposed VoIP". David Endler & Mark Collier.
  

If you are interested in VoIP security, and willing to contribute to the community, you still have time to join the VoIP Security Best Practices project (best practices will be linked to the tools mentioned before).