[VOIPSEC] Who can prove us wrong?

[Voiceline]

Dear VOIPSEC members,

I represent the Danish VoIP security project IP-Matrix. We are working on a hosted VoIP solution, which relies on positively identifying the individual users, by three phased identification including biometrics - using an external hardware device. 

The main goal is to make sure that ONLY registered users can lock on to the matrix - in achieving this, we gain the ability to trace any mellitus traffic back to the attacker. 

We believe that we can make a secure VoIP environment, by removing the incentive for compromising it. "If you do it - you won't get away with it"

It will be possible to force your way in to the matrix by hijacking the hardware unit of any registered user and then forcing them to logon for you, but in doing so your will be committing an extremely serious criminal act by any law, and we (the police) will still know witch user to contact.  

We will be working closely together with the Danish and international law enforcement agencies - and even thou we can't promise to deliver the actual attacker - we can most definitely give them a reliable point of origin to begin the investigation. (Spoofing/identity theft is the primary barrier for law enforcer's ability to solve cyber crime) 

Facts: We have developed the concept together with the Danish Technical University's (DTU) department for Informatics and Mathematical Modelling (IMM) and the (former) head of Danish police counterintelligence department for cyber crime. The project has also been evaluated by the Danish military research department (FOFT).

We are looking for companies that specialise in security assessment and testing for carriers. We claim that no attacker can gain access to the matrix, with out the hardware device of a registered user etc. 

Who can prove us wrong?



Venlig hilsen/ Regards

 
 
Patrick W. Ireland
CEO / Voiceline 
 
Tlf         +45 45 88 29 59
mobil     +45 26 88 28 59
fax        +45 45 88 29 69
mail     Patrick at Voiceline.dk
URL     www.Voiceline.dk