also @ TechSpot: Top PC Games for this Holiday Season and Beyond

Subscribe

Newsletter Our Feeds

Receive weekly updates on new articles, news and contests in your mail!

Email address:

Information Technology

VoIP applications could provide botnet controls

By Derek Sooman, TechSpot.com
Published: January 26, 2006, 5:09 PM EST
Industry experts are warning of the dangers of Internet phone services such as Skype and Vonage being used to supply a means for cybercriminals to send spam and launch attacks. Seemingly, VoIP applications could provide tremendous cover for launching denial-of-service attacks, and because many VoIP applications use encrypted data traffic that can't easily be monitored, attackers will be able to hide themselves. The Communications Research Network is urging VoIP providers to publish their routing specifications or switch to open standards.

"These measures would...allow legitimate agencies to track criminal misuse of VoIP," Jon Crowcroft, a professor at Cambridge University in the U.K., said in a statement.

User Comments (8)

Post a comment
djleyo
on January 26, 2006
8:16 PM
it looks like the all of the security software companies are going to get some more work .
i just hope that people allready using the svc notice these types of threats before its to late
this way the security software industrie will keep running to the end of time

nathanskywalker
on January 26, 2006
9:37 PM
Well, i'm glad i found this article before i started using skype...was considering...might not now....really i don't need it and probably would not have used it anyway, google talk works . and yess... Unfortunently
security software industrie will keep running to the end of time
That is too true. As long as there is to be anyform of structure in a society, government, or cyberspace(in this world anyway), there is going to be a need for security.
Seemingly, VoIP applications could provide tremendous cover for launching denial-of-service attacks, and because many VoIP applications use encrypted data traffic that can't easily be monitored, attackers will be able to hide themselves.
Honest programmers certainly "shot themseves in the foot".
Of course a hacker would usethis ability, i would take advantage of the situation if it was me in their place. Imagine being able to directly(more or less) attack someone, with complete anomity and not get caught.

exscind
on January 27, 2006
1:24 AM
I've been using Skype for a while, and really liked the clarity and easiness of usage. Yeah, apparently a DoS attack might happen, but I'm really no more likely to get attacked on Skype than just online with the plethora of viruses, worms and malwares floating around the web right now. It's a good warning by the Communitcaitons Research Network, but for me the benefit still outweighs a only potential harm.

charp
on January 27, 2006
4:25 AM
yeah agree on that exscind,

it would mean you have to boycot specific software like skype or others known for their vulnerabilities.
When i first got my pc, msnmessenger, was the first i kicked out. Just to many bad stories, i heard/read about it.
Always try looking for alternative software, that's less popular with the masses.

PanicX
on January 27, 2006
12:23 PM
This is all just heresy, there's no proof of concept or even a documented attack. I can't see this being any different than using ssh or encrypted IM to control botnets.

cyrax
on January 27, 2006
4:44 PM
With stuff like zone alarm and othe software watching our ports, i feel wecould withstand such attacks.

Vaulden
on January 27, 2006
5:17 PM
I don't think the problem with this avenue of attack is that it is a new type of threat. But services like Skype and Vonage are likely to spread through the masses that have no concept of network security

mentaljedi
on January 31, 2006
9:45 AM
At the moment, its not so widespread. But within a couple of years we will start having to worry about it. But if we start fixing it now, we will never have to worry!

Browse more commented news