Multi-service Threats: Attacking and Protecting Network Printers and VoIP Phones alike

Printing over a network and calling over VoIP technology are routine at present. This article investigates to what extent these services can be attacked using freeware in the real world if they are not configured securely. In finding out that attacks of high impact, termed the Printjack and Phonejac...

Full description

Saved in:
Bibliographic Details
Published inarXiv.org
Main Authors Bella, Giampaolo, Biondi, Pietro, Bognanni, Stefano
Format Paper Journal Article
LanguageEnglish
Published Ithaca Cornell University Library, arXiv.org 01.03.2022
Subjects
Computer Science - Cryptography and Security
Printers
Online AccessGet full text

Cover

More Information
Summary:Printing over a network and calling over VoIP technology are routine at present. This article investigates to what extent these services can be attacked using freeware in the real world if they are not configured securely. In finding out that attacks of high impact, termed the Printjack and Phonejack families, could be mounted at least from insiders, the article also observes that secure configurations do not appear to be widely adopted. Users with the necessary skills may put existing security measures in place with printers, but would need novel measures, which the article prototypes, with phones in order for a pair of peers to call each other securely and without trusting anyone else, including sysadmins.
ISSN:2331-8422
DOI:10.48550/arxiv.2202.10832