%0 Conference Proceedings %T Predictive Analytics to Prevent Voice over IP International Revenue Sharing Fraud %+ Eindhoven University of Technology [Eindhoven] (TU/e) %+ AnalyzeData %A Meijaard, Yoram, J. %A Cappers, Bram %A Mengerink, Josh %A Zannone, Nicola %Z Part 4: Visualization and Analytics for Security %< avec comité de lecture %( Lecture Notes in Computer Science %B 34th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec) %C Regensburg, Germany %Y Anoop Singhal %Y Jaideep Vaidya %I Springer International Publishing %3 Data and Applications Security and Privacy XXXIV %V LNCS-12122 %P 241-260 %8 2020-06-25 %D 2020 %R 10.1007/978-3-030-49669-2_14 %Z Computer Science [cs]Conference papers %X International Revenue Sharing Fraud (IRSF) is the most persistent type of fraud in the telco industry. Hackers try to gain access to an operator’s network in order to make expensive unauthorized phone calls on behalf of someone else. This results in massive phone bills that victims have to pay while number owners earn the money. Current anti-fraud solutions enable the detection of IRSF afterwards by detecting deviations in the overall caller’s expenses and block phone devices to prevent attack escalation. These solutions suffer from two main drawbacks: (i) they act only when financial damage is done and (ii) they offer no protection against future attacks. In this paper, we demonstrate how unsupervised machine learning can be used to discover fraudulent calls at the moment of their establishment, thereby preventing IRSF from happening. Specifically, we investigate the use of Isolation Forests for the detection of frauds before calls are initiated and compare the results to an existing industrial post-mortem anti-fraud solution. %G English %Z TC 11 %Z WG 11.3 %2 https://inria.hal.science/hal-03243633/document %2 https://inria.hal.science/hal-03243633/file/496047_1_En_14_Chapter.pdf %L hal-03243633 %U https://inria.hal.science/hal-03243633 %~ IFIP-LNCS %~ IFIP %~ IFIP-TC %~ IFIP-WG %~ IFIP-TC11 %~ IFIP-WG11-3 %~ IFIP-DBSEC %~ IFIP-LNCS-12122