<% dim mm as string = "November" dim dd as string = "01" dim yyyy as string = "2006" dim status as string = "1" %> PCCW eNewsletter

Voice-over-Internet Protocol (VoIP) technology is rapidly replacing traditional digital voice communications. Enabling users to save on IDD costs by using an identification code to make or receive long-distance calls via the Internet offers huge potential for growth. IDD savings are good news for companies that are heavily reliant on overseas calls. As VoIP technology is still being developed, security needs to be tightened up considerably. As a result, companies using VoIP should be extra vigilant in monitoring and improving internal security measures and systems. Below, we outline threats arising from the new technology and how your company can protect itself.

Don't let voice/data network integration put your business at risk!

With telephone and data traffic merged, VoIP technology is more complex and open to misuse than conventional telephone networks. Broadly speaking, the risks fall into two categories:

Telephone-related security risks

- While VoIP greatly reduces the cost of IDD calls, users must still pay Internet-access fees and other related charges. This leaves both systems open to criminals who can hack into networks and redirect service charges.

- Like traditional telephone calls, conversations via VoIP can be intercepted and privacy infringed.

- While an identification code is needed to access VoIP services, thieves can use tactics such as identify spoofing or rogue devices to hack into telephone servers and steal user identities.

- When using a VoIP service via public networks from coffee shops, hotels and airports, users run the risk of revealing their IP addresses to third parties.

Data-related security risks

- Computer viruses can attack linked data networks via VoIP networks.

- Data transactions made via VoIP technology can result in "IP telephony spamming" of users' mobile phones.

- Hackers can also use VoIP technology to hack into data networks and steal sensitive information.

- Criminals can even send abusive signals or information that overloads terminal processors and causes system crashes.
As you can see, the risks involved in using VoIP technology are far greater than those of traditional landline telephone systems. If your business is using VoIP to make and receive calls, you should have your IT team address these issues by implementing an inter-related prevention scheme.

How to ensure your VoIP network is secure

Below are seven simple steps you can take to ensure the integrity of your company's VoIP network:

1. As IP Private Branch Exchanges (IP PBXs) are the most important and most commonly hacked component in a VoIP network, your company should protect its IP PBX with a VoIP firewall.

2. To stop sensitive data being stolen, you should encrypt and send all data you transfer by VoIP via Virtual Private Networking (VPN).

3. A reliable Internet Service Provider (ISP) will be happy to help you build a safe VoIP network.

4. Regularly checking, restoring and renewing your security software will ensure your system is able to fend off threats.

5. Reset and renew your passwords regularly for all network equipment.

6. Separate voice and data transfers made via your company's Virtual LAN (VLAN).

7. Install a proxy server in your firewall to monitor all dial-in and dial-out voice-and-data transmissions.

The earlier you act, the more secure your business will be!

Slashing IDD costs to a minimum, VoIP technology is becoming the communications imperative for many companies. But be sure to protect yourself against the various risks by getting your IT team to formulate effective prevention strategies before you begin enjoying the advantages of Voice-over-Internet. Remember, prevention is always better than cure!
How can I protect my network against virus attacks?
How can I monitor the status of different computers over the network?
What's the most secure way to use passwords?
How do I ensure the safety of my computer when I am not using it?
Any other security issues I need to address?

Squashing security bugs in the ID verification process

Multi-talented UTMs: The easy way to enhance network security

Growing your email database



1. How can I protect my network against virus attacks?
There are many computer viruses, and new species are being created daily. The best way to protect yourself is to ensure that all your servers and computers are equipped with the most up-to-date anti-virus software.
2. How can I monitor the status of different computers over the network?
Your company's IT administrator should establish a clearly-defined monitoring system that checks the status of all network users and instantly alerts him/her to any emergencies.
3. What's the most secure way to use passwords?
When assigning a password for your login ID, never send the password via an unencrypted email or leave it lying around where others can see it.
4. How do I ensure the safety of my computer when I am not using it?
If your work takes you away from your desk occasionally, install a screen saver program to prevent damage to the screen. If working in a shared area, please remember to lock your laptop or desktop to stop third-parties from accessing it.
5. Any other security issues I need to address?
Set and use different login identities and passwords for different applications, and avoid logging onto your company's networks on public computers. Most importantly of all, choose a reliable ISP that offers professional advice and security assistance.