ABOUT THE AUTHOR


Gary Audin
Gary Audin is the President of Delphi, Inc. He has more than 40 years of computer, communications and security...
Read Full Bio >>
SHARE



Gary Audin | August 18, 2010 |

 
   

There is Still SPIT

There is Still SPIT SPIT is real. However it seems that SPIT situations have not been reported well so we do not know how bad the problem is.

SPIT is real. However it seems that SPIT situations have not been reported well so we do not know how bad the problem is.

There has not been a lot of public discussion recently about SPam over Internet Telephony (SPIT). The problem still exists.

SPIT is the distribution of unwanted voice calls via VoIP. It is similar to e-mail SPAM. We can produce SPIT via several signaling protocols, but the spread of SIP is making it easier then ever to create SPIT. The candidates for SPIT-producing attacks are telemarketers, prank callers and those wishing to overload the network and voice services of an organization. You could call SPIT voice phishing.

The nojitter.com blog written by Eric Krapf, "SPIT Pre-Emption" points out the problem of detecting and blocking SPIT:

And as several security experts have pointed out, filtering voice spam is even harder, because the filtering decision has to be made in real time. And even more troubling, if voice is going to become a crucial component of mission-critical business applications, as the Unified Communications vision suggests, real-time networks can't afford to be crippled by the kind of resource diversion/consumption that unchecked spam represents.

Junk e-mail, SPAM, is easier to detect and block. The junk e-mail passes through a server before being delivered. The server can be used to scan the e-mail and determine if it should be delivered, marked as SPAM or blocked/filtered. Although e-mail is generally delivered in near-real time, a few seconds of delay will not interfere with the delivery expectations. Voice calls do not pass through a server and must be delivered in real time, 150ms or less time to ensure that the conversation is fluid. VoIP calls are peer-to-peer transmissions. The endpoint has to perform the filtering of SPIT.

The call manager could block calls from listed caller IDs if they were known in advance. That assumes the caller ID is correct and not spoofed. Also, if the SPIT is destined for a voice mail system server, then there will be time to analyze the call and filter it if necessary.

The independent Skype Journal has an interesting post about Skype SPIT, "Wishlist: Solve Skype SPIT (Spam over Internet telephony)". Katherine Robinson wrote that when she signed up for Skype, she set her restrictions to "open to all takers" so she could receive calls from businesses who were not on her contact list. Within 10 days she started to receive SPIT at 5 am, selling a pre-approved credit card. A friend of Katherine’s also receives SPIT regularly and in the middle of the night. She resolved the situation by restarting her contact list then blocking calls from the businesses that were not on her contact list, a Catch-22 situation. She was not satisfied with the Skype response to the SPIT problem.



COMMENTS




Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Did you know you can style comments using HTML tags and upload your avatar photo? To upload your avatar photo, first complete your Disqus profile. Once your profile is complete, you may add your avatar photo. (Hide this hint)

Sign up to the No Jitter email newsletters

  • Catch up with the blogs, features and columns from No Jitter, the online community for the IP communications industry. Each Thursday, we'll send you a synopsis of the high-impact articles, podcasts and other material posted to No Jitter that week, with links for quick access.

  • A quick hit of original analysis by the experts who bring you Enterprise Connect, the leading event in Enterprise Communications & Collaboration. Each Wednesday, this enewsletter delivers to your email box a thought-provoking, objective take on the latest news and trends in the industry.

Your email address is required for membership. For details about the user information, please read the UBM Privacy Statement

As an added benefit, would you like to receive relevant 3rd party offers about new products/services and discounted offers via email? Yes

* = Required Field
Enterprise Connect Orlando 2012
Enterprise Connect is proud to announce the following industry leaders will deliver keynote addresses at Enterprise Connect Orlando:
--Steven J. Bandrowczak, Vice President & General Manager, Avaya Networking
--OJ Winge, Senior VP/GM,Video & Collaboration, Cisco
--Kirk Koenigsbauer, Corporate VP, Office Business Group, Microsoft
--Alistair Rennie, GM, Lotus Software and Collaboration Solutions, IBM Software Group
Enterprise Connect Webinars
Wednesday, Nov. 30, 2 PM EST/11 AM PST

This presentation reviews best practices and tools for implementing data center clouds, including how to pin-point and resolve problems, and minimize cost while maximizing performance and usability.
Virtual Enterprise Connect
This in-depth Virtual Event will feature detailed presentations by technology experts who can help you plan your Lync-based UC migration and get the most out of all that Lync has to offer..
Enterprise Connect Orlando 2012
The Enterprise Connect conference program has been published! Our confernce is designed with one over-riding objective: To help you make the best decisions as you migrate your enterprise communications and collaboration.
Trending Now
Upcoming Events
February 15, 2012
For employees away from the office—whether on the go, at a remote location, or telecommuting from home—success depends on connecting the right people with the right information anywhere to a...
February 1, 2012
Have your video implementation projects fallen short of your expectations in user satisfaction or utilization? Reaping the benefits depends on not only on selecting the technology, but on careful plan...
January 18, 2012
As your enterprise moves into its Unified Communications migration, you’ll need to meet short-, medium- and long-term goals that provide investment protection, return on investment, and real bus...