Researching and developing a pentest tool to test security at a voip/call center system

Abstract

The security concerns of VoIP telephone systems are similar to those of other Internetconnected devices. This means that hackers with knowledge of VoIP vulnerabilities can perform denial-of-service attacks, harvest customer data, record conversations, and compromise voicemail messages. Compromised VoIP user account or session credentials may enable an attacker to incur substantial charges from third-party services, such as longdistance or international calling. Pentest is the process of a simulated cyberattack against a system to check for dangerous/critical exploitable vulnerabilities. In the context of the VOIP call center, pentest has not been considered carefully. With pentest, we can uncover the weakness of the system in order to help developers and many companies to improve their service securely.