Hacking Exposed Unified Communications & VoIP Security Secrets & Solutions, 2nd Edition

PART IVUC SESSION AND APPLICATION HACKING

Case Study: An Attack Against Central SIP

ABC Company is a medium-sized retail business with about 10,000 employees in 500 retail locations across Texas. Although their business is good, it is highly seasonal, with most of the revenue generated during the holidays. They have been a big user of UC for many years, with legacy trunking at each retail site. As part of their continued deployment of UC, ABC Company outsourced the UC administration and let go a number of their network engineers. John Smith was one of the casualties of this outsourcing effort.

Right before John Smith was let go, ABC Company decided to migrate to SIP and centralize all their trunking into two data centers. They did some traffic ...