Haotian Deng
ABSTRACT
We present the demonstration of CEIVE (Callee-only inference and verification), an effective and practical defense against caller ID spoofing. CEIVE is a victim callee only solution without requiring additional infrastructure support or changes on telephony systems; It is ready to deploy and easy to use. Given an incoming call, CEIVE leverages a callback session and its associated call signaling observed at the phone to infer the call state of the other party. It further compares with the anticipated call state of the incoming call, thus quickly verifying whether the incoming call comes from the originating number or not. In this demo, we demonstrate CEIVE installed on Android phones combating both basic and advanced caller ID spoofing attacks.
- Haotian Deng, Weicheng Wang, and Chunyi Peng. CEIVE: Combating Caller ID Spoofing on 4G Mobile Phones Via Callee-Only Inference and Verification. In ACM International Conference on Mobile Computing and Networking, MobiCom. ACM, 2018. Google Scholar
Digital Library
- Federal Trade Commission. Ftc releases annual summary of consumer complaints. https://www.ftc.gov/news-events/press-releases/2017/03/ftc-releases-annual-summary-consumer-complaints, 2017.Google Scholar
- MarketWatch. Here's how much phone scams cost americans last year... https://www.marketwatch.com/story/heres-how-much-phone-scams-cost-americans-last-year-2017-04--19, April 2017.Google Scholar
- FakeCall, 2018. Mobile app at Google Play and App Store.Google Scholar
- spoofcard. https://www.spoofcard.com/free-spoof-caller-id, Feb 2018.Google Scholar
Index Terms
- Combating Caller ID Spoofing on 4G Phones Via CEIVE
Recommendations
New Security Threats Caused by IMS-based SMS Service in 4G LTE Networks
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecuritySMS (Short Messaging Service) is a text messaging service for mobile users to exchange short text messages. It is also widely used to provide SMS-powered services (e.g., mobile banking). With the rapid deployment of all-IP 4G mobile networks, the ...
CEIVE: Combating Caller ID Spoofing on 4G Mobile Phones Via Callee-Only Inference and Verification
MobiCom '18: Proceedings of the 24th Annual International Conference on Mobile Computing and NetworkingCaller ID spoofing forges the authentic caller identity, thus making the call appear to originate from another user. This seemingly simple attack technique has been used in the growing telephony frauds and scam calls, resulting in substantial monetary ...
Spoofing Against Spoofing: Toward Caller ID Verification in Heterogeneous Telecommunication Systems
Caller ID spoofing is a global industry problem and often acts as a critical enabler for telephone fraud. To address this problem, the Federal Communications Commission has mandated telecom providers in the U.S. to implement STIR/SHAKEN, an industry-...
Comments