B.3 Phone/Voice vector attacks and defences

A [Threat Vectors]

• Identity Theft

• Account Takeover

• Wire Fraud

• Healthcare Data Breach

• service desk social engineering (MGM, Twitter)

B [Software Solutions]

• In-band detection Voice analytics - Pindrop, Validsoft,TBD

• Out of band Detection - Remote proofing via NIST 800-63A (Lidar, Video camera, Fingerprint, Geolocation)

 C [Capture Points]

• In-Band : IVR (network and premise), Media relay control point, Media forking, SIPREC, CALEA Intercept

• Out of band: Use telephony to trigger SMS message link to Credential service provider CSP for remote proofing via 800-63A

D [Impact]

• Financial

• Reputation

• National security

• Identity Theft

E [Potential Solutions]

• SIPREC/CALEA open API to solution vendors for analysis

• IVR Capture points for analysis and Credential Proofing CSP

• SMS to remote CSP Proofing per NIST