Technical information

ManualsBrandsAT&T ManualsNetwork RouterDEFINITY Remote Port Security Device

121

122

123

124

125

126

127

128

129

130

Detecting Toll Fraud

Issue 7 June 2001

4-67

Recent Change History Report (DEFINITY ECS

and DEFINITY G1 and G3 only)

The latest administration changes are automatically tracked for DEFINITY ECS

and DEFINITY G1 and G3. For each administration change that occurs, the

system records the date, time, port, login, and type of change that was made.

For DEFINITY ECS and DEFINITY G1 and G3:

 To review the report, enter list history. Check for unauthorized changes to

security-related features discussed in this handbook.

NOTE:

Since the amount of space available for storing this information is limited,

you should print the entire output of the

list history command immediately

upon suspicion of toll fraud.

For DEFINITY G3V4 with the Intel

processor, the history log has doubled in size

to 500 entries, and provides login and logoff entries. This log includes the date,

time, port, and login ID associated with the login or logoff.

Malicious Call Trace

For DEFINITY G2, G3r, System 85 R2V4, and DEFINITY G3V2 and later

releases, Malicious Call Trace (MCT) provides a way for terminal users to notify a

predefined set of users that they may be party to a malicious call. These users

may then retrieve certain information related to the call and may track the source

of the call. The feature also provides a method of generating an audio recording of

the call.

While MCT is especially helpful to those businesses that are prime targets of

malicious calls, such as bomb threats, this feature can aid any business in tracing

hackers. For this reason, it may be considered as a security tool for businesses

that do not normally experience malicious calls.

Depending on whether the call originates within the system or outside it, the

following information is collected and displayed:

 If the call originates within the system:

— If the call is on the same node or DCS subnetwork, the calling

number is displayed on the controlling terminal.

— If an ISDN calling number identification is available on the incoming

trunk, then the calling number is displayed.