Technical information

Detecting Toll Fraud
Issue 7 June 2001
4-61
For DEFINITY ECS and DEFINITY G3, the report is divided into two sub-reports,
a Summary report and a Detail report. The Security Violations Summary Report
has the following fields:
NOTE:
The report header lists the switch name, date and time the report was
requested.
— Counted Since: The time at which the counts on the report were last
cleared and started accumulating again, or when the system was
initialized.
— Barrier Codes: The total number of times a user entered a valid or invalid
remote access barrier code, and the number of resulting security violations.
Barrier Codes are used with remote access trunks.
— Station Security Code Origination/Total: The number of calls originating
from either stations or trunks that generated valid or invalid station security
codes, the total number of such calls, and the number of resulting security
violations.
— Authorization Codes: The number of calls that generated valid or invalid
authorization codes, the total number of such call, and the number of
resulting security violations. Calls are monitored based on the following
origination types.
 Station
 Trunk (other than remote access)
 Remote Access
 Attendant
— Port Type: The type of port used by the measured login process. If
break-ins are occurring at this level, the offender may have access to your
system administration. With DEFINITY Release 5r, port types can be:
 SYSAM-LCL (SYSAM Local Port)
 SYSAM-RMT (SYSAM Remote Port)
 MAINT
 SYS-PORT (System Ports)
— Total: Measurements totaled for all the above port types.
— Successful Logins: The total number of successful logins into SM (that is,
the login ID and the password submitted were valid) for the given port type.
— Invalid Login Attempts: The total number of login attempts where the
attempting party submitted an invalid login ID or password while accessing
the given port type.
— Invalid Login IDs: The total number of unsuccessful login attempts where
the attempting party submitted an invalid login while accessing the given
port type.