Attacks on Voice over IP software
It gets easier for attacker to exploit bugs in VoIP software because of the increasing software complexity. This can cause critical disruptions in service availability.
It can creates regulatory risks (e.g. critical infrastructure security regulations). Customer or company data security can also be affected.
Kamailio offers a wide range of core functionality and contains over 200 modules to extend its features.
It can be challenging to secure your Kamailio infrastructure against attacks during strict project and maintenance schedules.
Security assessment
We offer an external security assessments to protect and harden your infrastructure against attackers. Our advanced security testing can effectively find security relevant bugs.
An in-depth check of the Kamailio configuration and the used software modules for potential issues.
Software test with an extensive test suite for known errors and unknown security vulnerabilities with fuzzing.
Automatic creation and test of millions of input data sets with a custom test suite and advanced fuzzing software.
Fuzzing is an automated software testing method that involves providing invalid, unexpected, or random data as inputs to a software.
Detection of bugs that are really difficult or impossible to find with manual or structured testing.
Monitoring of the test object for exceptions such as crashes, failing built-in self-tests or for finding potential memory leaks. Errors are collected and evaluated for their criticality.
Our approach
Our security assessment is usually structured like this:
- Initial communication
- Definition of your goals
- Session to understand the scope and environment
- Proposal which includes: goals, methodology, deliverables and offer
- Establish communication contacts and time line
- Secure transfer of custom assets for the assessment
- Test execution, information after urgent critical findings
- Result delivery: executive summary and technical report with details
- Discussion of results
Your benefit
We provide a service with a standardized and proven approach. You benefit from the low overhead setup, structured results and effective communication.
We provide a security assessment service with a standardized and proven approach.
Low overhead setup, structured results and effective communication.
Concentrate on projects to grow your business.
Dedicated and protected testing infrastructure with a proven software stack.
Executive summary and technical report, including details on security findings and steps to reproduce them.
Improved security of your special or custom Kamailio modules and configuration.
Interested in protecting your Kamailio infrastructure?
We are looking forward to speak with you!
