Security Bsides Las Vegas 2024

Combating phone spoofing with STIR/SHAKEN - a BSidesLV crowd-sourced status quo, demo & explanation
2024-08-06 , Tuscany

STIR/SHAKEN is a set of protocols that adds PKI to phone calls. Effectively adding a digital signature that can be verified by a phone that supports STIR/SHAKEN, proving the calling number isn't spoofed. The US FCC made STIR/SHAKEN mandatory for carriers in the US starting July 1 2021. Canada joined in a little later. I didn't plan on speaking about this since STIR/SHAKEN is just wishful thinking for now where I live in Norway. However; after a little crowdsourcing work over 2-3 days here in Vegas to check the status of STIR/SHAKEN, it has become clear to me a talk is needed in order to enlighten people and call SHAME, SHAME, SHAME on US mobile carriers!


STIR/SHAKEN is a set of protocols that adds PKI to phone calls. Effectively adding a digital signature that can be verified by a phone that supports STIR/SHAKEN, proving the calling number isn't spoofed. The US FCC made STIR/SHAKEN mandatory for carriers in the US starting July 1 2021. Canada joined in a little later. I didn't plan on speaking about this since STIR/SHAKEN is just wishful thinking for now where I live in Norway. However; after a little crowdsourcing work over 2-3 days here in Vegas to check the status of STIR/SHAKEN, it has become clear to me a talk is needed in order to enlighten people and call SHAME, SHAME, SHAME on US mobile carriers!

Founder & organizer of PasswordsCon. I know your next password. Linkedin.com/in/thorsheim for all the corporate details.

This speaker also appears in: