Voice Fraud

1
Voice Fraud

• Chris Richardson
• Portfolio Manager

2
Voice Fraud background

• Definition
• The term, as is generally applied, involves the
  theft of services or deliberate abuse of voice
  and data networks

The Unseen Threat

• Threat
• 61 of respondents in organisations with over 400
  employees had incurred losses above 5,000, with
  an astounding 16 of businesses over 1000
  employees incurring losses in excess of 50,000
• Telephone switchboard hacking is not new, but
  criminals are now using the latest VoIP
  technology to cover their trails
• What type?
• DISA Result Direct loss of revenue
• Voice Mail hacking Result Direct loss of
  revenue
• Employee abuse Result Direct loss of revenue
  productivity loss
• Call Forwarding abuse Result Direct loss of
  revenue
• Penetration attack, looking for modems Result
  Possible security breach

Source-Independent survey July 2008 Source-
The Guardian April 2007
3
Facts and figures

• Figures
• According to CFCA, estimates of global annual
  communications fraud losses to be in the range of
  45 - 50 billion
• Of that, approx 9 billion concerns compromised
  PBX/voicemail systems
• The UK is ranked 5th highest country for
  fraudulent activity
• So who gets done?
• Large financial institution via voicemail
  hacking. Undisclosed figure
• Hacker breaks into FEMA phone system 12k over
  weekend
• One of our clients lost 25,000 over one weekend

Source- Communications Fraud Control
Association 26th June 2009
Source- MSNBC 20th August 2008
4
Prevention???

• Existing methods
• Call Logging
• Network Provider
• You
• Damovos Voice Security Service
• Take the worry away
• What does it do?
• Monitors and prevents abuse / threats
• Flexible policy settings
• Additional services
• Selective recording of calls
• 999/112 alerts
• Network dispute resolution

Real - Time
5
Damovos Voice Security Service

• Ability to identify call by Attribute (e.g. voice
  call on fax line, modem call on a voice line etc)
• Ability to use a VPN connection to create,
  distribute and enforce security, usage and
  performance Policies in real time, updated from
  Horsham
• Ability to Prevent (not merely see) anomalous
  communications issues

6
Voice Security Service

• Voice Firewall
• Enforces voice network access and usage policies
• Inspects all inbound and outbound network
  activity - lower telecom costs
• Terminates abusive inbound / outbound calls
• Protects corporate data network from back door
  access
• Example Policy
• Calls to ISPs over unauthorised modems
• Non fax calls on dedicated fax lines
• VoIP Spam
• Toll calls e.g.118 or 090 (with email alert)
• Alerts to caller ID with held calls
• PIN authenticated access for PBX
  
  maintenance

7
For the technically minded
Via VPN
Real time Enterprise-wide PBX-independent
8
The Offer

• ½ Price Health Check
• Provides equipment for 1 month to monitor up to 2
  x ISDN30
• Detailed report highlighting areas of concern
• Cost refunded if a 5 year service contract taken
• More information?
• Visit
• Voice Security Service - Health Check

9
Insert Glyns slides

• Title
• Bullet text
• Sub bullet
• Sub bullet
• Bullet text

Thank You