臺灣博碩士論文加值系統

隨著網路通訊的蓬勃發展，網路電話的使用率亦快速成長，其與傳統公眾交換電話的連線，由於系統本質及特性上的差異，導致IP2PSTN電信嚴重的電話詐欺問題。部份研究運用授權方法，全面篩選出未被徵求的撥號連線請求，以斷絕詐騙集團向受話者行使詐術的機會，但其阻斷者除了詐騙電話外，還包括其他原因而未被徵求的非詐騙連線請求。本研究將以非即時阻斷的方式搜集未被徵求的網路電話連線請求，再針對已知的網路電話詐騙模式，利用資料採礦技術中規則式交叉比對分析方法，在不監聽通話內容的情況下，偵測出網路詐騙電話，所得結果回授給網路電話代理伺服器執行前級過濾處理，以過濾可疑網路詐騙電話連線請求。

The utility rate of internet phone is increased rapidly, as internet communication grows up. Due to the differences in nature and characteristic of systems, the connections between internet phone and traditional public switched phone induce serious phone swindles of IP2PSTN communication. In some researches, “non-authorized dial-up connection requests” were sifted out by “Authorization Verifying Code, AVC” to break the possibility for internet scam clan. However, it breaks not only the scammers but also the non-scammed connection requesters who aren’t authorized for some reasons. In this research, we’ll collect non-authorized internet phone requests by non-real-time interrupt method. According to the internet phone scam models which we know, in the case of not listening on the call content, scammed internet phone can be detected by using “data mining technology in the rule-based cross-comparison of analytical methods”. All results are fed back to the server of internet phone which exercises front-end filter process to sift out connection requests of doubtful scammed internet phones.

摘要 i
ABSTRACT ii
目錄 iv
表目錄 vi
圖目錄 vii
詞彙說明 ix
1. 緒論 1
1.1研究背景 1
1.2研究範圍 2
1.3研究動機與目的 4
1.4論本架構 6
2. 文獻探討 7
2.1電話詐騙 7
2.1.1 SPIT 7
2.1.2 SPIT行為模式分析 8
2.2網路電話原理 10
2.2.1 Session Initiation Protocol (SIP) 10
2.3資料採礦 14
2.3.1分類法 19
2.3.1.1分類的目的與應用 21
2.3.1.2分類所需的資料前置處理 21
2.3.1.3分類的程序 24
3. 研究方法 26
3.1研究流程 28
3.2異常撥號偵測與診斷 28
3.3系統架構 32
3.4系統分析與開發 33
3.4.1授信授權驗證異常呼叫 39
3.4.2異常撥號圖形篩選器診斷與分析 41
3.4.3異常撥號圖形篩選器之系統設計 41
3.4.3.1個人資料數據採樣(profile data sampling) 43
3.4.3.2數據預處理和匯入(data preprocessing and import) 45
3.4.3.3數據變換及簡化(data transformation and simplification) 46
3.4.3.4模型的建立與檢查(model building and checking) 49
3.4.3.5數據挖掘及過濾(data mining and filtering) 55
3.4.3.6數據儲存／使用及解釋(data storage / use and interpretation) 55
4. 系統實證 57
4.1系統環境 57
4.2系統需求、介面與流程 60
4.3異常撥號行為診斷分析系統測試 61
5. 結論與建議 65
5.1結論 65
5.2未來研究與建議 66
5.3研究限制 66
參考文獻 67
附錄 70
A　訓練樣本轉換前資料表 70
B　訓練樣本轉換後資料表 80

[1]M.-M. Daniel J, "Multidomain Virtual Security Negotiation over the Session Initiation Protocol[M]." Critical Information infrastructures Security. Springer Berlin. 2007, vol. 46(3), pp. 249-261.
[2]H. S. Kundan Singh, "Failover, load sharing and server architecture in SIP telephony[J]," Conputer Communications.2007, vol. 30(2), pp. 927-942.
[3]刑事警察局. (2011.12) "防治電信網路詐欺犯罪現況". 刑事雙月刊45期.pp.13-19
[4]C.-H. L. Hsia-Ling Chiang, Shih-Ming Cho, Sebastian Lai, "An Anti-Fraud mechanism on IP2PSTN Telehony," Security Technology (ICCST), 2010 IEEE International Carnahan Conference,2010. pp.85-93
[5]李. 張意唐. (2006.05) "兩岸電訊戰-地下基地台詐騙案偵辦紀實". 刑事雙月刊. pp.28-32.
[6]陳松春. (2010) "兩岸共同打擊跨境詐欺犯罪策略與成效". 刑事雙月刊,pp.24-49
[7]警政署, 2005,"警政署94年竊盜詐欺案件概況," . Retrieved from http://www.npa.gov.tw/NPAGip/wSite/lp?ctNode=12594&xq_xCat=12&mp=1.
[8]警政署, 2006,"警政署95年詐欺案件概況,". Retrieved from http://www.npa.gov.tw/NPAGip/wSite/lp?ctNode=12594&xq_xCat=13&mp=1.
[9]警政署, 2007,"警政署96年詐欺案件概況,". Retrieved from http://www.npa.gov.tw/NPAGip/wSite/lp?ctNode=12594&xq_xCat=14&mp=1
[10]警政署,2008, "警政署97年詐欺案件概況,".Retrieved from http://www.npa.gov.tw/NPAGip/wSite/lp?ctNode=12594&xq_xCat=15&mp=1.
[11]警政署,2009, "警政署98年詐欺案件概況," . Retrieved from http://www.npa.gov.tw/NPAGip/wSite/lp?ctNode=12594&xq_xCat=16&mp=1.
[12]警政署, 2010,"警政署99年詐欺案件概況," Retrieved from http://www.npa.gov.tw/NPAGip/wSite/lp?ctNode=12594&xq_xCat=17&mp=1..
[13]警政署,2011, "警政署100年詐欺案件概況," . Retrieved from http://www.npa.gov.tw/NPAGip/wSite/lp?ctNode=12594&xq_xCat=18&mp=1.
[14]W. a. N. David, V., "A Multilayered Architecture for Preventing Automated Spam in the IP Multimedia Subsystem," presented at the IEEE GLOBECOM'07 (Global Telecommunications Conference, November 2007,pp. 2140-2145
[15]J.Rosenberg、C.Jennings, "The Session Initiation Protocol (SIP) and Spam," ed: RFC 5039, 2008, pp. 4.
[16]Croft、N.J、Olivier、M.S., "A Model for Spam Prevention in IP Telephony Networks using Anonymous Verifying Authorities," 2005,pp. 140-145
[17]S. Dongwook, Jinyoung, A., and Choon, S., "Progressive Multi Gray-Leveling A Voice Spam Protection Algorithm," pp. 18-24, September 2006 2006.
[18]Maclntosh、Robert、Vinokurov、Dmitri., "Detection_and_Mitigation_of_Spam_in_IP_Telephony_Networks_using_Signaling_Protocol_Analysis," IEEE on Advances in Wired and Wireless Communication, 2005.pp. 376-385
[19]W. a. J. Yang, Paul., "VISOR: VoIP Security using Reputation," IEEE ICC, 2008.pp. 243-250
[20]J. Quittek, Niccolini, S., and Tartarelli, S., Stiemerling, M., Brunner, M., Ewald, T., "Detecting SPIT Callls by Checking Human Communication Patterns," IEEE ICC, 2007.pp. 1134-1141
[21]Y. M. Fei wang, Benxiong Huang, "P2P-AVS:P2P based Copperative VoIP Spam Filtering," presented at the IEEE on Wireless Communications and Networking Conference, 2007.Mar. pp.324-331
[22]J. M. S. Dritsas, M. Theoharidou, G. F. Marias, D. Gritzalis, "Threat Analysis of the Session Initiation Protocol Regarding Spam," presented at the International Performance Computing and Communications Connference (IPCCC) 2007, Apr.2007.pp.431-439
[23]J. T. K. So Young Park, Shin Gak Kang, "Analysis of Applicability of Traditional Spam Regulations to VoIP Spam," presented at the International Conference on Advanced Communication Technology (ICACT) 2006, Feb. 2006. pp.233-245
[24]朱. 趙凱, 辛陽,楊義先,鈕心忻, "一種新的SPIT檢測和阻止方法," vol. 33, June 2007. pp.163-165
[25]J.Rosenberg、G.Camarillo、A.Johnston、J.Peterson、R.Sparks、M.Handley、E.Schooler, "SIP: Session Initiation Protocol," ed: RFC 3261, 2002.pp.157-260
[26]維基百科. 2009.11.24, ID3演算法. Available: http://zh.wikipedia.org/wiki/ID3%E7%AE%97%E6%B3%95
[27]維基百科. 2012.04.05, E.164. Available: http://en.wikipedia.org/wiki/E.164
[28]陳. 丁一賢, "資料探勘 Data Mining": 滄海書局, 2005.01. pp.250-267,pp.322-345
[29]古東明、蔡嘉原、林皇伸、魏見安、陳麗紋、陳曉蘭, "網路語音廣告之防堵-實作於SIP協定," presented at the TANET 2006台灣網際網路研討會,教育部電子計算機中心主辦。, 2006. pp.331-344
[30]J. Quittek, Niccolini, S., and Tartarelli, S., "Prevention of Spam over IP Telephony(SPIT)," NEC Technical Journal, May 2006 pp.103-112.
[31]陳彥竹, "建立授權碼機制於VoIP防詐欺之研究," 碩士論文, 資訊應用科技研究所, 醒吾技術學院, 新北市, 2009.07.
[32]N. J. Quittek, S., and Tartarelli, S., Stiemerling, M., Brunner, M., Ewald, T.,, "Detecting SPIT Calls by Checking Human Communication Patterns," presented at the IEEE ICC,2007, 2007.pp.233-245
[33]楊. 蕭漢威, 魏志平,馬淑貞, "以網路流量資料探勘進行阻斷服務攻擊偵測之研究," 資訊管理學報, vol.14 No.2, 民國96年4月, pp. 1-25
[34]Allyson M. Hoss & Doris L. Carver, "Weaving Ontologies to Support Digital Forensic Analysis," Journal of IEEE, pp. 203-205, 2009.
[35]V. Vapnik, "An Overview of Statistical Learning Theroy," in IEEE Transcations on Neural networks, 1999. pp.323-342
[36]N. J. Quittek, S., and Tartarelli, S., , "Prevention of Spam over IP Telephony(SPIT)," NEC Technical Journal, May 2006. pp.211-224
[37]J. R. E Schooler, M Handley and H Schulzrinne, "SIP: Session Initialization Protocol RFC 3261[S]," in Technical Report, ed: Internet Engineering Task Force (IETF), March 1999. pp.20-54
[38]S. G. K. J. T. K. So Young Park, "Analysis of Applicability of Traditional Spam Regulations to VoIP Spam," proceeding of the International Conference on Advanced communication Technology(ICACT)2006, Feb. 2006. pp.112-125
[39]A. H. S. a. Q. L. Jianyun Xu, "Behavior Mining for Fraud Detection," Journal of Research and Practice in Information Technology, vol. 39,No. 1, February 2007. pp.441-453
[40]維基百科. 2012.04.12, H.323. Available: http://en.wikipedia.org/wiki/H.323