Helping operators protect revenue and Quality of Experience

Next Generation

Fraud Protection

$38.1 billion annually

1.69% of all Telecom revenues

Known Impact

• OTT Bypass Fraud

• OTT TV Piracy Fraud

• Header Fraud

• Others: DNS, VoLTE, RCS, NFV, IoT

Unknown Impact ?

What about unknown problems?

In Europe, US, Canada, Japan and South Korea data has already exceed Voice & SMS revenues

UNIVERSAL POLICY CONTROL

Business Intelligence

Subscriber Engagement

Traffic Optimization

Subscriber Services

Cyber Security

Business Services

Deployed at 300 CSPs globally

https://www.sandvine.com/trends/fraud.html

The Problem: OTT Bypass FraudThere are many people and services looking to make

money by illegally terminating voice calls. Operators need

a solution that protects the intended route of the call from

start to finish to stop fraud and preserve:

QualityRevenue Security

PSTN Call

Call 2

OTT to OTT

(no termination fee)

Viber Call

Call 1

Hijacked Carrier

to Viber Call (Avoids Termination fee)

Viber Call

What is OTT Bypass Fraud?

Sandvine’s Findings

• 60% of Viber traffic was Viber In

• Five million minutes of Viber In calls were terminated on the network each month at $0.20/min

The Problem: Header Fraud

There are many people and services attempting to receive

unlimited data for free. Operators need a solution that

detects and blocks HTTP header fraud to preserve:

QualityRevenue Security

What is Header Fraud?

$$$

$0

DPI Inspection

Header tricks DPI inspectionInject the HTTP header

Sandvine’s Findings

• Subscribers exploiting the zero-rating of a subscriber self-care portal consumed 4x more than average user

• Up to $7M/month exposure based on local data rates

The Problem: OTT TV PiracyThere are many new applications and services that

distribute premium content for free. Content providers

need a solution that can identify and block illegal OTT TV

streaming to preserve:

Distribution RightsRevenue Services

What is OTT TV Piracy?

Licensed Content

Illegal Hosting

(including live streaming)

Aggregator Database

$$$

$0

Follow the money…

Sandvine’s Findings

• 9% of North American households use Kodi

• Almost 70% of Kodi users are using unofficial Add-ons that support unlicensed content

Subscriber Details

Subscriber IP • Browsing Behavior

Entitlements • Top Talkers

VoIP Intelligence

Top VoIP providers • Suspicious

Simbox Flows • Bypass Signatures

Devices

Client Device • Access Device

Tethering State

Location

Region, Market, PoP • QoS

Roaming/Domestic

Applications

Protocol • Start/End Time

Tx/Rx Bytes • FlowId • Encrypted

Network Resources

Cell ID • Element • BRAS • RNC

Subscriber Usage

Bytes Up/Down • Viewing Duration

VoIP Call Duration • Call Type

Outputs

Traffic Classification

Security

Botnets; Malware; DDoS

Adaptive Case Management

Configured through RAID

Only allow service within expected parameters

Deny service with specific known parameters

Regulatory compliant

Standard fraud management resolution

workflow

Advanced Fraud Detection

Link Analysis

Anomaly detection

Customer Risk Profile

Unknown Unknown

Joint Solution: Fraud Protection

Collect Monitor Notify Discover Act

Traffic

Classification

Mitigation

An end-to-end solution to help operators protect their network from fraud

RAID FMS Hybrid Approach leverages

Machine Learning to beat Fraud

Designed to identify unknown fraud types Targeting known fraud scenarios

RULES LIBRARY

Fraud cases enhance Machine Learning AFD

AFD findings create and improve rules

AFD - ADVANCED FRAUD DETECTION

FRAUD

FRAUD

IRSF

Bypass and OTT Bypass

SIM Box Fraud

PBX and VoIP Fraud

Premium Rate Service Fraud

Roaming Fraud

Dealer Fraud

Subscription Fraud

OTT Bypass

OTT TV Piracy

Tunelling Fraud

(...)

CONTINUOUS

LEARNING

More unknown-unknown spaces: IOT, VoLTE, NFV/SDN, 5G