Voice Mail Security
Voice Mail systems are used by telecommunication operators as a service to their clients to increase communication efficiency. Those with PBXs or other devices may operate their own Voice Mail systems in house. Besides voice message storage, Voice Mail systems contain many other features such as message forwarding and return a call options.
Risks
Risks that arise from abuse and subversion of Voice Mail systems include unauthorized access to Voice Mail box, eavesdropping, modification of voice messages and service theft.
Advantages
Voice Mail security services work to ensure the security and confidentiality of information stored in Voice Mail boxes and to guard against possible service theft.
Voice Mail security uses some key attack vectors such as targeting authentication mechanisms. Unexpected input such as sequences of DTMF tones are also used to see how exceptional circumstances are handled. The types of issues which may be discovered are unauthorized access and modification of Voice Mail boxes and the ability to make a phone calls using the account of the mail box owner
These services are performed by a combination of methods including analysis of the voice menu tree. Verification of how the system responded to unexpected input is used to probe for further issues. |