Opinions and predictions:
1. Why security? We have to secure VOD for the same reason we need to secure everything else -- it's an opening an attacker could use. VOD/VoIP are special in that its packets get highest priority in order to generateQuality of Service. Who wants to wait 1-2 seconds after you talk before you hear the other person start to respond?. Any time you treat one type of traffic differently, you're making security more difficult. The risk is not only the possibility a"virtual wiretap" where an attacker might eavesdrop on your voice transmissions. The other risk is an attacker using VOD/VoIP packets to mount his attacks through the openings you created in your security zone to accomodate VOD/VoIP.
2. What do we do? My organization uses firewalls and router access lists at the enterprise level, and Intrusion Detection Systems at the WAN and LAN levels. The Intrusion Detection System is a key component because it is configurable to respond in real time.We use ISS RealSecure because it can detect hundreds of known attacks and their XForce (R&D) team is very quick about updating the software to detect new attacks. In addition, we can set admin-configured filters and events for detection and response. The IDS has worked quite well for us at the WAN and LAN levels.
3. Will new tech always cause problems? Yes and no. I can conceive of a situation where the vendor for new tech might build security into the product, BUT it's unlikely becauseit wouldn't sell well. Security is a compromise between asset protection and functionality and, therefore, each organization needs a tailored solution.
