CEIVE: Combating Caller ID Spoofing on 4G Mobile Phones Via Callee-Only Inference and Verification
CEIVE: Combating Caller ID Spoofing on 4G Mobile Phones Via Callee-Only Inference and Verification
复制标题
DOI：
10.1145/3241539.3241573
复制
发表时间：
2018-10
期刊：
影响因子：
--
通讯作者：
Haotian Deng;Weicheng Wang;Chunyi Peng
中科院分区：
文献类型：
--
作者：
Haotian Deng;Weicheng Wang;Chunyi Peng
主叫方ID欺骗伪造真实的主叫方身份，从而使呼叫看起来来自另一个用户。这种看似简单的攻击技术已被用于日益增长的电话欺诈和诈骗电话，导致大量的金钱损失和受害者投诉。不幸的是，来电显示欺骗很容易发起，但很难防御;迄今为止还没有有效和实用的防御解决方案。在本文中，我们提出了CEIVE（只呼叫推理和验证），一个有效的和实用的防御来电显示欺骗。这是一个受害者被叫方唯一的解决方案，不需要额外的基础设施支持或电话系统的变化。我们制定的设计作为一个推理和验证问题。给定来电，CEIVE利用在电话上观察到的回叫会话及其关联的呼叫信令来推断另一方的呼叫状态。它进一步与预期的呼叫状态进行比较，从而快速验证呼入呼叫是否来自始发号码。我们利用标准化的呼叫信令消息来提取有用的功能，并设计特定于呼叫的验证和学习来处理多样性和可扩展性。我们在Android手机上实现了CEIVE，并与美国所有四大移动的运营商、一家固定电话和两家小型运营商进行了测试。它在几乎所有测试的欺骗场景中显示出100%的准确性，除了一个特殊的有针对性的攻击案例。
Caller ID spoofing forges the authentic caller identity, thus making the call appear to originate from another user. This seemingly simple attack technique has been used in the growing telephony frauds and scam calls, resulting in substantial monetary loss and victim complaints. Unfortunately, caller ID spoofing is easy to launch, yet hard to defend; no effective and practical defense solutions are in place to date. In this paper, we propose CEIVE (Callee-only inference and verification), an effective and practical defense against caller ID spoofing. It is a victim callee only solution without requiring additional infrastructure support or changes on telephony systems. We formulate the design as an inference and verification problem. Given an incoming call, CEIVE leverages a callback session and its associated call signaling observed at the phone to infer the call state of the other party. It further compares with the anticipated call state, thus quickly verifying whether the incoming call comes from the originating number. We exploit the standardized call signaling messages to extract useful features, and devise call-specific verification and learning to handle diversity and extensibility. We implement CEIVE on Android phones and test it with all top four US mobile carriers, one landline and two small carriers. It shows 100% accuracy in almost all tested spoofing scenarios except one special, targeted attack case.