[VOIPSEC] VOIP and Forensics

[Christopher A. Martin]

This type of task will require correlation of many different types of logs,
not just VoIP, but also possibly router/firewall logs, source/destination
pairings, common sources (even if they are spoofed), possible tagging by
tools that can detect 0 day attacks...etc... It's hard in the traditional
world, but may be easier combined with the telephony patterns...

Christopher A. Martin
P.O. Box 1264
Cedar Hill, Texas 75106
Chris at InfraVAST.com

> -----Original Message-----
> From: Voipsec-bounces at voipsa.org [mailto:Voipsec-bounces at voipsa.org] On
> Behalf Of Mark Teicher
> Sent: Friday, March 11, 2005 6:16 AM
> To: Voipsec at voipsa.org
> Subject: [VOIPSEC] VOIP and Forensics
> 
> Has anyone examined how to produce evidence for legal proceedings to prove
> actual VOIP fraud?
> As this is question I have posed to a few companies who offer Managed
> Security Services for IPT and none of them provided a response .
> The only response I have received so far: "We have network+ certified and
> CCNA experts and currently scheduled for Juniper/Extreme training"
> Interesting that people are being trained and certified, but as I recall
> being trained on a product does not necessarily mean that one is qualified
> to produce evidence to prove VOIP fraud.
> 
> /mht
> 
> 
> 
> _______________________________________________
> Voipsec mailing list
> Voipsec at voipsa.org
> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org