a lecture presented at Latro user conference Dubai 2019

1. Comparative assessment of control
layers in bypass prevention strategy
By : Dr. Eman Gawish
October 2019
1

2. International fraud
2

3. A study on internet bypass fraud
Source: CFCA report 2015
 Simbox is one of major retail fraud that globally shares 10-15% of
total losses determined by all frauds in telecommunication industry

4. Bypass Fraud detection techniques
 Test call generator
4
 Use multiple TGC vendors to increase the coverage
 Share the fraud numbers with other carriers

5. Bypass Fraud detection techniques
 FMS CDR analysis
 Use a nation wide FMS CDR analysis tool
5

6. Bypass Fraud detection techniques
 SS7 Signaling Analysis
 Network Protocol Analysis, and its main virtue is that it recognizes the
signature (or fingerprint) of the SIM Box as it comes onto the network,
blocking the use of any SIM card used on the box’s modem.
6

7. Why bypass detection techniques fail?
7

8. Integrated bypass fraud controls
 Integrated TCG and CDR analysis and ss7 protocol analysis controls in
nation wide FMS.
 The intelligence and data enrichment from FMS (account/subscriber
IMEI, IMSI ..etc) enable better fraud detection from the cases
identified by TGC using and ss7 protocol analysis.
 Integrated controls, with integrated resources and integrated
operations, lower the cost of fraud detection.
 Nation wide integrated controls for bypass enable information sharing,
reserve the nation network and keeps the quality of service.
8

9. Deep packet inspection
 Use DPI probes to block OTT bypass IP traffic.
 It is difficult to distinguish OTT bypass from plain OTT
traffic.
9

10. Some issues
 The responsibilities between different entities in operator:
customer services, fraud, security,…etc.
 The law enforcement for sharing information
 The law of telecom unauthorized services, punishment :
fares/jail.
 The audit on bypass detection operations employed by
operators.
10

11. Bypass Prevention strategies
11

12. 12