Professional Documents
Culture Documents
Short Message Service (SMS) messages account for approximately 10 percent of a mobile operator’s revenue, according
to research firm IDC. The growing volume of spam can threaten this revenue by provoking subscribers to churn.
Furthermore, some of that spam is sent from fraudulent addresses, causing inaccurate billing for subscribers and
revenue forfeiture for the mobile operator, which cannot bill the sender for the termination fee. To prevent subscriber
churn and protect revenues, mobile operators need a flexible solution for identifying and dropping unwanted SMS
messages.
THE CISCO SMS SPAM AND FRAUD PREVENTION SOLUTION IMPROVES SUBSCRIBER SATISFACTION, HELPS
PREVENT FRAUDULENT BILLING, AND PROTECTS THE MOBILE SERVICE PROVIDER’S SIGNALING NETWORK
FROM FLOODING.
EXECUTIVE SUMMARY
SMS has become the next frontier for direct marketers, drawn to a potential market of 1.5 billion mobile services subscribers. In Europe, 18
percent of marketing and advertising agencies offer SMS-based marketing (Empower Interactive, May 2004). Forrester Research estimates that
140 million European subscribers received SMS ads in 2004 and that 62 percent of European direct marketers will include SMS in their
marketing campaigns (Forrester, March 2004). Mobile operator networks are experiencing the impact: mobile marketing messages represent
approximately 10 percent of network traffic other than point-to-point traffic (Empower Interactive, May 2004).
Controlling SMS spam is important to mobile operators for two reasons. One is that spam irritates subscribers, contributing to churn. Giga
Research reports that 60 percent of spam recipients found spam annoying, and 28 percent regarded it as an unacceptable invasion of privacy.
During the first six months of 2003 in the United Kingdom alone, the Independent Committee for the Supervision of Standards of Telephone
Information Services (ICSTIS) managed 3500 SMS-related spam complaints (Giga Research, 2003). The other reason for controlling spam is to
avoid revenue forfeiture. In fraudulent SMS schemes, the sender emulates the identity of another subscriber or that of a valid SMS center, which
relays and manages short messages. When this occurs the mobile operator receives no termination fee for sending the message. If the sender
spoofs a subscriber address, resulting in unwarranted charges on the subscriber’s monthly bill, subscriber satisfaction plummets. Furthermore,
high volumes of fraudulent SMS can degrade the performance of the signaling network, and in extreme cases bring it down.
Cisco Systems® offers a proven solution to these problems, called the Cisco® SMS Spam and Fraud Prevention solution. Mobile operators
deploy it on their signaling network, where it intercepts SMS messages, applies filters to identify spam, and drops offending messages.
Uniquely, the solution can identify likely spam messages as they are being sent, based on repetitive content and volume, and can temporarily
apply rules to block this traffic until a human operator can intervene.
The Cisco SMS Spam and Fraud Prevention solution is part of Cisco IP Transfer Point, a solution for transporting Signaling System 7 (SS7)
traffic over IP networks. As the leading next-generation signaling platform, the Cisco IP Transfer Point allows service providers to efficiently
transport SS7 traffic by offloading the traffic from the traditional Signaling Transfer Point (STP) network to an SS7 over IP network. The
Cisco IP Transfer Point also positions the mobile operator for enhanced return on investment (ROI) and profits by providing the infrastructure
for IP-enabled service control points (SCPs) and revenue-generating IP services. Entry-level through high-end platforms are available. The
Cisco IP Transfer Point provides enhanced scalability to the network, reduces operating costs, facilitates IP-based application access to SS7
networks, and in many cases adds more sophisticated network management and control than available with traditional SS7 networks.
Most of these schemes are similar: The subscriber receives a message to call or send a text message to a premium-rate number—for example, to
find out if he or she has won a prize (Figure 1). Children are often specifically targeted. These attacks not only annoy subscribers, they cause
revenue forfeiture for the mobile operator, which cannot bill for message termination. Worse, huge volumes of SMS messages in a short period
of time can take down the signaling network, causing the bearer network to refuse calls and connections. Table 1 summarizes the risks of SMS-
based attacks to mobile operators.
Figure 1
Typical SMS Spam Scheme
Service Opportunity
Business incentives for deploying an SMS spam and fraud prevention solution include:
• Protecting the network from the effects of spam-generating viruses, which can include widespread billing errors that annoy subscribers and
require many personnel hours to correct
• Preventing volume spikes that can degrade signaling-network performance and possibly render the bearer network useless
To achieve these goals, mobile operators need a flexible solution that can stop unwanted SMS messages and accept legitimate SMS messages.
The solution needs the intelligence to recognize potential spam in real time and temporarily stop it until the operations staff can confirm that the
messages are, indeed, unwanted spam.
Real-Time Screening
Cisco offers a next-generation signaling solution that allows mobile operators to shield their subscriber base and internal operations from SMS-
based spamming and other fraudulent activity. The Cisco SMS Spam and Fraud Prevention solution, which resides on the mobile operator’s
signaling network, screens SMS messages in real time. It includes two primary components: the Cisco IP Transfer Point and the Ferma SMS
Anti-Spam Screening (SAS) platform from Ferma, a member of the Cisco Service Provider Solutions Ecosystem Program. The solution works
as follows:
1. The Cisco IP Transfer Point intercepts SMS traffic and routes it to the Ferma SAS platform. Traffic other than SMS is passed along
without interference (Figure 2).
2. The Ferma SAS platform filters the message to see if it matches the mobile operator’s white lists or black lists, which are based on the
sender’s SMS-Center address, keywords, or other parameters.
3. Messages that do not match the black-list filters or that match the white-list filters are passed through to the destination.
4. Messages that match the black-list filters are stopped and not delivered to the destination mobile device. The message sender can
receive either a positive or negative acknowledgement, depending on how transparent the mobile operator wants its service to be,
because sending a negative acknowledgement alerts the sender that the mobile operator has identified the message as spam.
Filtering Rules
The mobile operator uses a Web-based interface to define filtering rules that can include:
• SMS-Center address.
• Time-limited rules that apply for a specified period, such as: All messages coming from a specific SMS-Center will be accepted until the end
of March 2005.
• Quota-based rules, such as: Only 250,000 SMS messages will be accepted from a particular SMS-Center, and the remaining will be blocked.
This type of rule is useful for enforcing SMS termination policies between operators or with content aggregators.
• Originating address.
• Heuristic analysis, or looking for repetitive occurrences within a period of time, based on SMS headers and contents.
• Help ensure compliance with government laws and regulatory commission requirements
Proven Performance
In use by more than 50 mobile operators worldwide, the Cisco ITP commands more than 35 percent market share for SS7-over-IP signaling.
Mobile operators can be confident about deploying a solution that builds on the Cisco core competency in high-performance, highly available
IP routing as well as its expertise in building large-scale, carrier-class, packet networks.
Comprehensive Programs
Through Cisco Advanced Services, mobile operators gain access to certified experts’ in-depth technical knowledge, specialized tools and
methodologies, industry-leading research labs, and a network of certified partners to help ensure the delivery of high-quality mobile wireless
services. Cisco consultants and engineers help minimize the risk to valuable business assets by working with the mobile operator to plan,
design, implement, operate, and optimize mobile wireless networking solutions. Contact your Cisco representative to find out more about how
Cisco Advanced Services experts can help improve staff productivity, and help reduce the total cost of ownership for your network.
CONCLUSION
As SMS continues to grow in popularity, the need for an effective SMS spam and fraud prevention solution is escalating. With its flexible rules
and self-learning capabilities, the Cisco SMS Spam and Fraud Prevention solution puts the mobile operator and, ultimately, the subscriber in
control of which SMS messages to allow or drop.
For more information on SMS spam and fraud prevention, visit: www.cisco.com/go/mobile
Cisco Systems has more than 200 offices in the following countries and regions. Addresses, phone numbers, and fax numbers are listed on
the Cisco Website at www.cisco.com/go/offices.
Argentina • Australia • Austria • Belgium • Brazil • Bulgaria • Canada • Chile • China PRC • Colombia • Costa Rica
Croatia • Cyprus • Czech Republic • Denmark • Dubai, UAE • Finland • France • Germany • Greece • Hong Kong SAR
Hungary • India • Indonesia • Ireland • Israel • Italy • Japan • Korea • Luxembourg • Malaysia • Mexico
The Netherlands • New Zealand • Norway • Peru • Philippines • Poland • Portugal • Puerto Rico • Romania • Russia
Saudi Arabia • Scotland • Singapore • Slovakia • Slovenia • South Africa • Spain • Sweden • Switzerland • Taiwan
Thailand • Turkey • Ukraine • United Kingdom • United States • Venezuela • Vietnam • Zimbabwe
All contents are Copyright © 1992–2005 Cisco Systems, Inc. All rights reserved. Cisco, Cisco Systems, and the Cisco Systems logo are registered trademarks or trademarks of
Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0502R) RK/LW8095 03/05