Demo: Combating Caller ID Spoofing on 4G Phones Via CEIVE
Demo: Combating Caller ID Spoofing on 4G Phones Via CEIVE
复制标题
演示：通过 CEIVE 打击 4G 手机上的来电显示欺骗
DOI：
10.1145/3241539.3267725
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Peng, Chunyi
中科院分区：
文献类型：
--
作者：
Deng, Haotian;Peng, Chunyi
我们提出了CEIVE（仅受呼叫者的推理和验证），一个有效的和实用的防御来电显示欺骗的演示。CEIVE是一个受害者被叫方专用解决方案，不需要额外的基础设施支持或电话系统的更改;它可以随时部署，易于使用。给定来电，CEIVE利用在电话上观察到的回叫会话及其关联的呼叫信令来推断另一方的呼叫状态。它还与呼入的预期呼叫状态进行比较，从而快速验证呼入是否来自始发号码。在这个演示中，我们演示了安装在Android手机上的CEIVE，可以对抗基本和高级的来电显示欺骗攻击。
We present the demonstration of CEIVE (Callee-only inference and verification), an effective and practical defense against caller ID spoofing. CEIVE is a victim callee only solution without requiring additional infrastructure support or changes on telephony systems; It is ready to deploy and easy to use. Given an incoming call, CEIVE leverages a callback session and its associated call signaling observed at the phone to infer the call state of the other party. It further compares with the anticipated call state of the incoming call, thus quickly verifying whether the incoming call comes from the originating number or not. In this demo, we demonstrate CEIVE installed on Android phones combating both basic and advanced caller ID spoofing attacks.