RESEARCH OF CALLER ID SPOOFING LAUNCH, DETECTION, AND DEFENSE
DOI:
https://doi.org/10.28925/2663-4023.2020.7.616Keywords:
caller ID; spoofing; CIVE; callee inference; callee verification; callee; caller; SIP; Session Initiation ProtocolAbstract
Caller ID parodying produces the valid Caller character, in this manner deciding seem to start from another client. This apparently basic assault strategy has been utilized in the developing communication fake and trick calls, bringing about significant financial trouble. Unfortunately, callerID spoofing is easy to implement but yet it is difficult to have protection against it. In addition, there are not effective and defense solutions available right now. In this research it is suggested the CIVE (Callee Inference & VErification), a compelling and viable guard against Caller ID spoofing. This way it is described how it’s possible to lunch call spoofing and between line describe how CIVE approach method can help to prevent somehow this kind of attacks. Caller ID Spoofing could cause huge financial and political issues special nowadays, when many things even sometimes authentication and verification are available by phone call, like banks approving transactions or two factor authentications and many other things. We believe critical industries specially banks and payment service providers should be protected against such vulnerabilities with their system and make an approach to prevent it, also it is very important to learn people specially who has special social place like politicians or celebrities to know such kind of attack are already exist. For this paper we implemented a call from white house to show there is no limitation and no matter whom you try to spoof, but destination which is the victim receive the call and that make this attack vector dangerous. And even modern communication and even devices like 4G and smart phones are not able to prevent or even detect this kind of attack. This study is a demonstration of the vulnerabilities available. All experiments were conducted on isolated mock-ups.
Downloads
References
V. M. Astapenya and V. Y. Sokolov, “Modified accelerating lens as a means of increasing the throughput, range and noise immunity of IEEE 802.11 systems,” in 2015 International Conference on Antenna Theory and Techniques (ICATT), Apr. 2015. https://doi.org/10.1109/ICATT.2015.7136852.
V. M. Astapenya and V. Yu. Sokolov, “Experimental evaluation of the shading effect of accelerating lens in azimuth plane,” in 2017 XI International Conference on Antenna Theory and Techniques (ICATT), pp. 388–390, 2017. https://doi.org/10.1109/ICATT.2017.7972671.
V. Sokolov, A. Carlsson, I. Kuzminykh, “Scheme for dynamic channel allocation with interference reduction in wireless sensor network,” in 2017 4th International Scientific-Practical Conference Problems of Infocommunications. Science and Technology (PIC S&T), pp. 564–568, 2017. https://doi.org/10.1109/INFOCOMMST.2017.8246463.
I. Bogachuk, V. Sokolov, and V. Buriachok, “Monitoring Subsystem for Wireless Systems based on Miniature Spectrum Analyzers,” in 2018 International Scientific-Practical Conference Problems of Infocommunications. Science and Technology (PIC S&T), Oct. 2018. https://doi.org/10.1109/infocommst.2018.8632151.
V. Y. Sokolov, “Comparison of Possible Approaches for the Development of Low-Budget Spectrum Analyzers for Sensory Networks in the Range of 2.4–2.5 GHz,” Cybersecurity: Education, Science, Technique, no. 2, pp. 31–46, 2018. https://doi.org/10.28925/2663-4023.2018.2.3146.
M. Vladymyrenko, V. Sokolov, and V. Astapenya, “Research of Stability in Ad Hoc Self-Organizated Wireless Networks,” Cybersecurity: Education, Science, Technique, no. 3, pp. 6–26, 2019. https://doi.org/10.28925/2663-4023.2019.3.626.
V. Sokolov, B. Vovkotrub, and Y. Zotkin, “Comparative Bandwidth Analysis of Lowpower Wireless IoT-Switches,” Cybersecurity: Education, Science, Technique, no. 5, pp. 16–30, 2019. https://doi.org/10.28925/2663-4023.2019.5.1630.
GSM Association. (2015). “Voice over LTE.” [Online]. Available: http://www.gsma.com/technicalprojects/volte/ [Sep. 30, 2019].
Circuit Switched (CS) Fallback in Evolved Packet System (EPS), TS23.272, 2017.
J. Rosenberg, et. al. (2002). “RFC3261: SIP: Session Initiation Protocol.” [Online]. Available: https://tools.ietf.org/html/rfc3261 [Sep. 30, 2019].
Mobile Radio Interface Signalling Layer 3. General Aspects, TS24.007, 2011.
M. Xuequan. (2017). “Chinese Police Arrest 118 in Scam Targeting Seniors.” [Online]. Available: http://www.xinhuanet.com/english/2017-09/20/c_136624766.htm [Sep. 28, 2019].
Phoenix New Media. (2018). “Alert! Phone Scam Targeting Chinese from China’s Consulates across the US! Someone Lost Millions of Dollars” (in Chinese). [Online]. Available: http://wemedia.ifeng.com/47830827/wemedia.shtml [Sep. 29, 2019].
Consulate General of the People’s Republic of China in New York. (2017, Apr.). “Phone Scam Alert.” [Online]. Available: http://newyork.china-consulate.org/eng/lqfw/lsbhyxz/t1486921.htm [Sep. 30, 2019].
Xinhua. (2017). “Phone Scams Targeting NYC Chinese Communities Exposed.” [Online]. Available: http://www.xinhuanet.com/english/2017-08/10/c_136513524.htm [Sep. 28, 2019].
True Software Scandinavia. (2017). “TrueCaller.” [Online]. Available: https://www.truecaller.com [Sep. 27, 2019].
Google. (2016). “Google Phone App.” [Online]. Available: https://play.google.com/store/apps/details?id=com.google.android.dialer [Sep. 30, 2019].
Android. (2017). “Telephony Manager.” [Online]. Available: https://developer.android.com/reference/android/telephony/TelephonyManager.html [Sep. 30, 2019].
Private Header (P-Header) Extension to the Session Initiation Protocol (SIP) for Authorization of Early Media, RFC5009, 2007.
URNs for the Alert-Info Header Field of the Session Initiation Protocol (SIP), RFC7462, 2015.
SIP: Session Initiation Protocol, RFC3261, 2002.
IP Multimedia Call Control Protocol based on Session Initiation Protocol (SIP) and Session Description Protocol (SDP). Stage 3, TS24.229, 2017.
Common Basic Communication Procedures using IP Multimedia (IM) Core Network (CN) Subsystem, TS24.628, 2017.
Communication Waiting (CW) using IP Multimedia (IM) Core Network (CN) subsystem; Protocol Specification, TS24.615, 2017.