Collaborative policy development at M3AAWG VTASIG and LAP DNC
description
Transcript of Collaborative policy development at M3AAWG VTASIG and LAP DNC
![Page 1: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/1.jpg)
Geneva, Switzerland, 2 June 2014
Collaborative policy development at M3AAWG VTASIG and LAP DNC
Hein Dries-ZiekenheinerVIGILO ([email protected])
ITU Workshop on “Caller ID Spoofing”
(Geneva, Switzerland, 2 June 2014)
![Page 2: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/2.jpg)
Geneva, Switzerland, 2 June 2014 2
Introduction
VIGILOwww.vigilo.nl
M3AAWG (Mobile Messaging Malware Anti Abuse Workgroup)
www.m3aawg.org
LAP (London Action Plan)www.londonactionplan.org
![Page 3: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/3.jpg)
Geneva, Switzerland, 2 June 2014 3
VTASIG
Formed out of M3AAWG membershipLarger (North American, European carriers, ISPs, Senders)In co-operation with LAP (especially DNC group)
Text book definition: public private partnership
![Page 4: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/4.jpg)
Geneva, Switzerland, 2 June 2014 4
VTASIG
Goal: bring down complaints on Voip abuse
RobocallsIllegal telemarketing Fraud
Policy development for three phases:Short termMid termLong term
![Page 5: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/5.jpg)
Geneva, Switzerland, 2 June 2014 5
Short term
*50 -> CDRs to regulatorNext hop
Find Originator of abuse (enforcement)
Charge back?Agency determines applicabilityConsumer Carrier “Charges Back” upstream carriersVoIP, Cable-Co, Telco and OTT must adhere to abuse reporting standard
HoneypotsTrace back (P-ANI)
![Page 6: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/6.jpg)
Charge-Back Model
*50
M3AAWG 30th General Meeting | San Francisco, February 2014
Initiates*50
AgenciesRegulatorsAgencies
Regulators CDR Sharing
Charge Back
Bad CDR’s
$10/call$12/call
$15 / Call
$5/call
Charge Back
In or Out of Band Abuse Reporting / Billing
![Page 7: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/7.jpg)
Geneva, Switzerland, 2 June 2014 7
(P)Honey Pots
Goal: gather intelligence using honey pots
Currently: large data set gathered from TNs that were abandoned for abuse CDRs of incoming calls(+1)CRTC Working on receiving regular numbers from telco’s (more +1)
Georgia Tech: currently working on data to gather information and actionable intelligence
![Page 8: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/8.jpg)
Geneva, Switzerland, 2 June 2014 8
Honey Pots
![Page 9: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/9.jpg)
Geneva, Switzerland, 2 June 2014 9
Honey Pots
![Page 10: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/10.jpg)
Geneva, Switzerland, 2 June 2014 10
Mid term
Do Not Call listAbuse from outside SS7 networkIntended mostly for VOIP->SS7 gatewaysCompares CgPN to list of “Do not Spoof” (SS7 based consumer) numbers
![Page 11: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/11.jpg)
Mid Term
User initiated blocking?Taking away legal/regulatory barriers
Geneva, Switzerland, 2 June 2014 11
![Page 12: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/12.jpg)
Mid Term
RFC 3325 P-Asserted-IdentityPAI Header for carriers to assert identiy (CID) of userAlso for privacy optionsCreates a Trusted domainSubject to common spec(T)Could even work in hybrid networks (SS7/VOIP with SS7/ISUP trust bits)
Geneva, Switzerland, 2 June 2014 12
![Page 13: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/13.jpg)
Mid Term
Geneva, Switzerland, 2 June 2014 13
![Page 14: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/14.jpg)
Mid Term
User initiated blocking?Taking away legal/regulatory barriers
Geneva, Switzerland, 2 June 2014 14
![Page 15: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/15.jpg)
Geneva, Switzerland, 2 June 2014 15
Long term
STIROthers will present on this
M3AAWG/LAP follow developmentConsider implications
![Page 16: Collaborative policy development at M3AAWG VTASIG and LAP DNC](https://reader036.fdocuments.in/reader036/viewer/2022062520/568159ef550346895dc737cf/html5/thumbnails/16.jpg)
Geneva, Switzerland, 2 June 2014 16
Conclusions and recommendations
No silver bulletInternational co-operation (PPP) requiredNational level: keep eye out for complaint levels..And respond with Best Practices defined internationally
For regulators: join LAPIndustry: join M3AAWG Together:VTASIGBrussels, Montreal, Boston, SF
Further info:[email protected]