Computer Weekly reports that 'Fuzzing' is a legitimate method of testing software systems for bugs and is accomplished by providing an application with semi-valid input to see what the receiving call centre's reaction will be. However, hackers employ this same methodology to exploit vulnerabilities by sending messages with content that, in most cases, is good enough for the target to assume that it's valid.
The reports adds: "Network intruders are leaping the fence from data networks over to the Voice over IP (VoIP) side, where they can easily take advantage of open source code for IP Telephony."
Have you read these related articles?
Newsletter:
