PSAP Call Routing Using Audio Signatures for Botnet Queueing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malicious entities can launch DDoS attacks on PSAP systems by using botnets to make fraudulent calls, which disrupt operations and are difficult to mitigate due to randomized SIM information and the requirement to listen to calls for validation, leading to repeated disruptions.
Innovation Solution
A system and method for routing botnet calls to a botnet call-answer queue by comparing audio signatures with predetermined botnet audio signatures, identifying fraudulent calls, and routing them to a queue for analysis and prevention from reaching PSAP operators, thereby mitigating DDoS attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all incoming calls are routed to PSAP operators for validation, then call authenticity can be confirmed, but system operations are disrupted by DDoS attacks and operator workload increases
Solution Approach 1:
The patent segments incoming calls into two distinct pathways: a botnet call-answer queue for suspected fraudulent calls and a normal PSAP operator queue for legitimate calls. This segmentation is achieved by analyzing audio signatures and routing calls based on match results, allowing the system to handle different call types through specialized channels that optimize both security and operational efficiency
Solution Approach 2:
The patent introduces an intermediary automated analysis system that acts as a mediator between incoming calls and PSAP operators. This intermediary automatically compares audio signatures against known botnet patterns, pre-processes calls, and makes routing decisions, thereby filtering out malicious calls before they reach human operators and reducing their workload
2Difficulty of detecting and measuring
If audio signature comparison is implemented to identify botnet calls, then fraudulent calls can be detected, but system complexity increases
Solution Approach 1:
The patent performs preliminary actions by pre-storing audio signatures of known botnet calls in a database before actual call detection occurs. When calls come in, the system simply compares them against this pre-established library of malicious patterns, which simplifies the detection process compared to analyzing calls from scratch and enables faster identification of fraudulent calls
3Object-affected harmful factors
If botnet calls are routed to a separate queue for analysis, then DDoS attack impact is reduced, but call handling time increases
Solution Approach 1:
The patent extracts malicious botnet calls from the main call processing stream by identifying them through audio signature matching and routing them to a separate botnet call-answer queue. This extraction removes harmful elements from the system's critical path, preventing them from consuming PSAP operator resources and time, while allowing legitimate calls to continue flowing through the normal efficient processing channel
Data Source
AI summary
A device, system and method for routing botnet calls to a botnet call-answer queue. A device, such as a call answering point (CAP) and/or a public-safety answering point (PSAP) router device, receives a call and determines an audio signature of the call. The device compares the audio signature of the call with one or more botnet audio signatures stored at a memory. In response to the audio signature of the call matching at least one of the one or more botnet audio signatures, the device: identifies the call as a botnet call that has been placed by a botnet; and cause the call to be routed to a botnet call-answer queue.