Fraud mitigation using traffic pattern monitoring with CGRateS
Channel: FOSDEM
Date: 11/02/2019

by Teofil Voivozeanu

At: FOSDEM 2019
https://video.fosdem.org/2019/H.1309/cgrates.webm


Traffic transparency and ability to react on pattern changes became more than a nice to have functionality in modern communication infrastructure.
In this talk Teo will explore various mechanisms implemented in the new ThresholdS module of CGRateS, focusing not only on improving QoS stats but also towards securing networks with automatic reaction profiles against fraud attempts.
CGRateS is a battle-tested Enterprise Billing Suite with support for various prepaid and postpaid billing modes. Traffic transparency and ability to react to pattern changes became more than a nice to have functionality in modern communication infrastructure.
ThresholdS module within CGRateS offers the ability to monitor generic events in real-time and react when preset thresholds are hit. As reactions, one can set notifications via HTTP or AMQP or CGRateS accounts related top-ups, debits or complete account deactivation. The events can be injected into ThresholdS via simple RPC (ie: JSON-RPC over socket), contributing to easy integration from external systems. In case of the high amount of events received in a short time, ThresholdS will absorb them via built-in DoS protection and only react on predefined intervals or number of events.
All these characteristics make ThresholdS an ideal candidate as a standalone component (without involving additional billing subsystems within CGRateS) for fraud detection and mitigation.
CGRateS is a battle-tested Enterprise Billing Suite with support for various prepaid and postpaid billing modes. 

Room: H.1309 (Van Rijn)
Scheduled start: 2019-02-03 15:40:00+01