The Library
Spoofing against spoofing : towards caller ID verification in heterogeneous telecommunication systems
Tools
Wang, Shen, Delavar, Mahshid, Azad, Muhammad Ajmal, Nabizadeh, Farshad, Smith, Steve and Hao, Feng (2024) Spoofing against spoofing : towards caller ID verification in heterogeneous telecommunication systems. ACM Transactions on Privacy and Security, 27 (1). pp. 1-25. doi:10.1145/3625546 ISSN 2471-2566.
|
PDF
WRAP-Spoofing-against-spoofing-towards-caller-ID-verification-telecommunication-systems-23.pdf - Accepted Version - Requires a PDF viewer. Download (2621Kb) | Preview |
Official URL: http://doi.org/10.1145/3625546
Abstract
Caller ID spoofing is a global industry problem and often acts as a critical enabler for telephone fraud. To address this problem, the Federal Communications Commission (FCC) has mandated telecom providers in the US to implement STIR/SHAKEN, an industry-driven solution based on digital signatures. STIR/SHAKEN relies on a public key infrastructure (PKI) to manage digital certificates, but scaling up this PKI for the global telecom industry is extremely difficult, if not impossible. Furthermore, it only works with IP-based systems (e.g., SIP), leaving the traditional non-IP systems (e.g., SS7) unprotected. So far the alternatives to the STIR/SHAKEN have not been sufficiently studied. In this paper, we propose a PKI-free solution, called Caller ID Verification (CIV). CIV authenticates the caller ID based on a challenge-response process instead of digital signatures, hence requiring no PKI. It supports both IP and non-IP systems. Perhaps counter-intuitively, we show that number spoofing can be leveraged, in conjunction with Dual-Tone Multi-Frequency (DTMF), to efficiently implement the challenge-response process, i.e., using spoofing to fight against spoofing. We implement CIV for VoIP, cellular, and landline phones across heterogeneous networks (SS7/SIP) by only updating the software on the user’s phone. This is the first caller ID authentication solution with working prototypes for all three types of telephone systems in the current telecom architecture. Finally, we show how the implementation of CIV can be optimized by integrating it into telecom clouds as a service, which users may subscribe to.
Item Type: | Journal Article | ||||||||
---|---|---|---|---|---|---|---|---|---|
Subjects: | H Social Sciences > HV Social pathology. Social and public welfare Q Science > QA Mathematics > QA76 Electronic computers. Computer science. Computer software T Technology > TK Electrical engineering. Electronics Nuclear engineering |
||||||||
Divisions: | Faculty of Science, Engineering and Medicine > Science > Computer Science | ||||||||
Library of Congress Subject Headings (LCSH): | Swindlers and swindling -- Prevention, Telecommunication systems -- Protection, Computer security, Mobile computing -- Security measures , Telephone -- Signaling , Signal theory (Telecommunication), Human-computer interaction | ||||||||
Journal or Publication Title: | ACM Transactions on Privacy and Security | ||||||||
Publisher: | ACM | ||||||||
ISSN: | 2471-2566 | ||||||||
Official Date: | 12 December 2024 | ||||||||
Dates: |
|
||||||||
Volume: | 27 | ||||||||
Number: | 1 | ||||||||
Page Range: | pp. 1-25 | ||||||||
DOI: | 10.1145/3625546 | ||||||||
Status: | Peer Reviewed | ||||||||
Publication Status: | Published | ||||||||
Re-use Statement: | © ACM, 2023 This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version was published in ACM Transactions on Privacy and Security, {VOL#, ISS#, 2023 http://doi.org/10.1145/3625546 | ||||||||
Access rights to Published version: | Free Access (unspecified licence, 'bronze OA') | ||||||||
Copyright Holders: | Copyright © 2023 Copyright held by the owner/author(s). Publication rights licensed to ACM. | ||||||||
Date of first compliant deposit: | 28 September 2023 | ||||||||
Date of first compliant Open Access: | 29 September 2023 | ||||||||
RIOXX Funder/Project Grant: |
|
||||||||
Open Access Version: |
Request changes or add full text files to a record
Repository staff actions (login required)
View Item |
Downloads
Downloads per month over past year