A comprehensive framework for detecting and preventing VoIP fraud and misuse

The SUNSHINE framework presented in this paper aims at detecting and preventing VoIP fraud and misuse. The SUNSHINE architecture is modular, and considers both prevention and detection at the network as well as the application level. SUNSHINE offers a combination of firewalling and intrusion detection, a distributed sensing system, a CDR analysis based on statistical analysis and artificial intelligence, a component for correlating and aggregating alarms, and a DNS-based real-time blacklist for VoIP. The SUNSHINE framework has been implemented based on components contributed by the project partners and first insights from initial deployment are already available.