Posts Tagged ‘Security’

Our upcoming talks at SpeechTEK and OSCON 2008 - VoiceXML, mashups and security

Friday, May 9th, 2008

Over the next couple of months you’ll get a chance to hear from us and meet us at a couple of upcoming conferences.

oscon2008.jpgFirst, from July 21-25 I’ll be up in Portland, Oregon, at O’Reilly’s OSCON 2008 giving a talk on “Mashing up Voice and the Web through Open Source and XML“. As the intro says:

With over 4.5 billion mobile and fixed phones out there as of November 2007, the phone represents the most ubiquitous user interface out there. As “mashups” on the web let us quickly and easily access information from multiple data sources, how do we extend those mashups to the world of the phone? How do we bring the old world of voice and telephony into the new world of the web, social networks and social media? And how do we do that using open source tools and open standards?

The session description gets into a bit more about specifically what I’ll be addressing. It should be a good time! As you can see from the schedule, OSCON is a strongly developer-focused show and so it should be a great time connecting with developers out there and talking about our platform. Speaking at this show is a bit of neat experience for me personally, too, as I spoke at one of the first OSCON’s back in 2000 when it was still called the “Open Source Conference” and was held in Monterey, CA. I know a good number of folks in the O’Reilly orbit so I’m looking forward to connecting with lots of people out there.

SpeechTEK.com.jpgNext up, both RJ and I will be speaking at SpeechTEK, August 18-20 in New York City. In fact, we’ll have a team of Voxeons there as we’ll have an exhibit booth and all sorts of things going on at the show. (More on that in later posts.)

RJ will be speaking first on Monday, August 18th, along with VoiceXML Forum founder Ken Rehor on the subject of “The Impact of W3C standard languages“:

The publication of W3C standard languages, such as VoiceXML and CCXML, has dramatically changed the speech application design process. This session discusses some of the efforts to extend and validate the use of standard languages. Learn how the call control language can work with SIP and VoIP to implement an extensible SIP softswitch. Discover how the VoiceXML Forum’s certification program has impacted the cross-vendor interoperability of VoiceXML by VoiceXML platform vendors.

Given our huge focus on open standards and RJ’s direct involvement as chair of the W3C’s CCXML Working Group, you can expect this session to deliver a wealth of information! (Hmmm… how high can I set the expectation bar for RJ? Hmmm… “he’s going to show how open standards solve world hunger!”… no, that’s a bit too high! RJ is, though, an excellent presenter as you may get a glimpse of from his past slide decks.)

I’ll follow with a session on Tuesday, August 19th, called “Securing CCXML and VoiceXML Applications“:

How secure are your speech applications? As the usage of both VoiceXML and CCXML continues to explode, and VoIP usage continues to grow dramatically, especially within enterprise environments, it is increasingly important that you ensure that applications and services are not open to attack. Learn about the potential vulnerabilities in a system using VoiceXML or CCXML, what you can do to secure these systems, and how you can develop a strong architecture.

Given my VoIP security background, it’s somewhat predictable that I’d be talking on this subject, eh? Seriously, though, it’s an area that doesn’t seem to be getting a whole lot of thought and so I’ll be taking a look at what the real risks are and how you can look at addressing them.

If you are going to either OSCON or SpeechTEK, please do leave a comment here or drop us an email and let us know. We love to meet face-to-face with blog readers and/or customers/developers. As much as we are able to do so (not sure yet), we’ll make the presentations available through this site. Stay tuned for more info - and we look forward to potentially seeing some of you in either Portland or New York!

Technorati Tags:
, , , , , , , , , , , , , ,

My presentations at VoiceCon Orlando this week…

Monday, March 17th, 2008

No Jitter |.jpgI’m down in Orlando this week for VoiceCon Orlando and will be part of three sessions. Tomorrow, I’m moderating a panel at 8am on VoIP security and on Thursday I’m moderating a panel on open source telephony. On Wednesday, I’ll be part of a keynote panel with Irwin Lazar on “Social networking and enterprise communication”, which should be quite fun. I’ll include below the full descriptions of the various sessions. If you are attending VoiceCon and want to connect, please do contact me.



Session Title: Top VOIP Security Threats
Date: 3/18/2008
Time: 8:00 AM
Room: Osceola B
Session Description:
There’s been a lot of concern about voice over IP security, but have there been many actual exploits? This session will inform you about the state of VOIP security. You’ll learn about generalized IP attacks that have affected IP telephony systems deployed on IP networks, and you’ll also find out what VOIP-specific attacks have actually been observed “in the wild”–and what to expect in the future.
KEY QUESTIONS: * What are the most serious voice-oriented attacks that are actually being carried out? What potential attacks haven’t occurred yet but probably will before long? * How do you protect your VOIP systems against these attacks? * What types of equipment and technologies must you implement to stop voice-oriented attacks? * What specific kinds of damage can these attacks cause?
Moderator(s):
Dan York - Dir of Emerging Comm Tech - Voxeo
Panelist(s):
Sachin Joglekar - Vulnerability Research Lead - Sipera Systems
David Endler - Director of Security Research - TippingPoint
Mark Collier - CTO - SecureLogix


Session Title: Open Source for Enterprise Voice: How Much, How Soon?
Date: 3/20/2008
Time: 11:45 AM
Room: Sun C
Session Description:
Open source PBXs are gaining a higher profile: Asterisk and other open-source PBX software packages continue to gain acceptance, and some traditional PBX vendors have implemented open source code for their products. But these efforts still aim mainly at smaller implementations. In this session, you’ll learn why open source PBX software has growing appeal, and whether it will appeal to larger customers as the market progresses.
KEY QUESTIONS: * What level of market share and acceptance has open source PBX software attained? What is expected? * Which products use open source PBX software? * What are the most compelling reasons for choosing open source PBX software? What are the greatest areas of concern in making this choice? * What are the technical challenges of an open-source PBX deployment, and how are these overcome? * What are some real-world customer experiences with open source PBX software?
Moderator(s):
Dan York - Dir of Emerging Comm Tech - Voxeo
Speaker(s):
M Raza - Product Management - 3Com
Bill Miller - VP, Prod Mgt & Mktg - Digium
Tony Pereira - Business Leader Business Communications - Nortel


Session Title: Social Networking Meets Enterprise Communications
Date: 3/19/2008
Time: 10:30 AM
Room: Osceola C
Session Description:
It?s no secret that world of enterprise communications is undergoing a transformation; IP Telephony and Unified Communications are changing the nature of the game. Now new forms of interaction, which began in the consumer/personal communications market — blogs, wikis and online services like Facebook ? are migrating into the enterprise. Where do these social networking systems ? and mindset ? fit into the enterprise communications landscape? Join us for a discussion about what?s real today and what?s likely to happen in the future.
Panelist(s):
Dan York - Dir of Emerging Comm Tech - Voxeo
Irwin Lazar - Principal Analyst & Program Director, Collaboration & Convergence - Nemertes Research

Technorati Tags:
, , , , , , ,