⌕ Поиск по атласу

IETF · RFC · RFC7375

RFC7375 · Secure Telephone Identity Threat Model

Secure Telephone Identity Threat Model

As the Internet and the telephone network have become increasingly interconnected and interdependent, attackers can impersonate or obscure calling party numbers when orchestrating bulk commercial calling schemes, hacking voicemail boxes, or even circumventing multi-factor authentication systems trusted by banks. This document analyzes threats in the resulting system, enumerating actors, reviewing the capabilities available to and used by attackers, and describing scenarios in which attacks are launched.

Официальная английская аннотация

As the Internet and the telephone network have become increasingly interconnected and interdependent, attackers can impersonate or obscure calling party numbers when orchestrating bulk commercial calling schemes, hacking voicemail boxes, or even circumventing multi-factor authentication systems trusted by banks. This document analyzes threats in the resulting system, enumerating actors, reviewing the capabilities available to and used by attackers, and describing scenarios in which attacks are launched.

Связи документа

Официальный источник · 2014-10-01

Полные импортированные сведения карточки
{
  "id": "RFC7375",
  "number": 7375,
  "title_en": "Secure Telephone Identity Threat Model",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "As the Internet and the telephone network have become increasingly interconnected and interdependent, attackers can impersonate or obscure calling party numbers when orchestrating bulk commercial calling schemes, hacking voicemail boxes, or even circumventing multi-factor authentication systems trusted by banks. This document analyzes threats in the resulting system, enumerating actors, reviewing the capabilities available to and used by attackers, and describing scenarios in which attacks are launched.",
  "authors": [
    "J. Peterson"
  ],
  "organizations": [],
  "publication_date": "2014-10-01",
  "current_status": "INFORMATIONAL",
  "current_status_ru": "Информационный",
  "publication_status": "INFORMATIONAL",
  "publication_status_ru": "Информационный",
  "lifecycle": "informational",
  "lifecycle_ru": "Справочный",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "art",
  "area_ru": "Приложения и взаимодействие в реальном времени",
  "working_group": "stir",
  "source_draft": "draft-ietf-stir-threats-04",
  "page_count": 13,
  "doi": "10.17487/RFC7375",
  "keywords": [
    "SIP",
    "Secure Origin Identification",
    "Communication Security",
    "RTCWeb",
    "Threat",
    "Real-Time Communication"
  ],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc7375/",
    "html": "https://www.rfc-editor.org/rfc/rfc7375.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc7375.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc7375/"
  }
}