Voice over Internet Protocol carries telephone calls as data packets on an IP network instead of using only a traditional phone circuit.
Offices, soft phones, and cloud calling accounts all rely on that data path, so network security becomes phone security.
How it works
Speech is digitized and sent across a private network or the public internet.
Accounts, numbers, and administration still exist, but they sit on ordinary computing infrastructure.
Risks include eavesdropping when media are not encrypted, forged caller identity, and toll fraud on the calling account.
Availability now depends on the data network as well as on any phone platform.
Concrete examples
- An office phone places calls through an internet provider instead of a classic trunk.
- A remote worker uses a soft phone application on a laptop.
- A calling account is abused to place expensive international calls over the data path.
Protective measures
- Encrypt signaling and call media wherever the product allows it.
- Lock down administration of the phone platform with its own strong authentication.
- Restrict outbound destinations so a stolen account cannot dial expensive routes.
- Separate phone administration accounts from ordinary mail accounts.