VOICE PLATFORMS
WITS
specializes in designing and configuring Secure Red Switch Networks and Extended
Switch Networks over a national or international area, using cutting edge
trunking and switching methods.
We are proven
integrators for Traditional PBX Systems, Integrated Voice Platforms, Unified
Messaging Platforms, Voice over IP and Voice over ATM installations as a meshed
hybrid network seamlessly connected to the traditional PSTN.
WITS provides Provisioning, Integration, Interconnect, Testing, Hardware and
Software Verification, Data Build-out, Translations,
Operations and Maintenance.
WITS help
focus and educate our customers on a commonly overlooked but typically expensive
mistake:
PBX SECURITY
Digital PBXs are widespread
throughout government and industry, having replaced their analog predecessors.
Today, even the most basic PBX systems have a wide range of capabilities that
were previously available only in large-scale switches. These new features have
opened up many new opportunities for an adversary to attempt to exploit the PBX,
particularly by using the features for a purpose that was never intended. The
threats to PBX telephone systems are many, depending on the goals of attackers.
Threats include:
 | Theft of service – i.e., toll fraud,
probably the most common of motives for attackers |
| Disclosure of information - data disclosed
without authorization, either by deliberate action or by accident. Examples
include both eavesdropping on conversations and unauthorized access to routing
and address data |
| Data modification - data altered in some
meaningful way by reordering, deleting, or modifying it. For example, an
intruder may change billing information or modify system tables to gain
additional services |
| Unauthorized access - actions that permit
an unauthorized user to gain access to system resources or privileges |
| Denial of service - actions that prevent
the system from functioning in accordance with its intended purpose. A piece
of equipment or entity may be rendered inoperable or forced to operate in a
degraded state; time-dependent operations may be delayed |
| Traffic analysis - a form of passive attack
in which an intruder observes information about calls (although not
necessarily the contents of the messages) and makes inferences, e.g., from the
source and destination numbers or frequency and length of the messages. For
example, an intruder observes a high volume of calls between a company’s legal
department and the Patent Office and concludes that a patent is being filed
|
