Policy Results Statistics Attributes

The following table lists and describes the attributes Oracle® Communications Security Shield (OCSS) displays for creating custom Policy Results Statistics reports.

Table B-1 Attributes for Use by Customers

Attributes Description
Note: On-screen, an icon precedes each Policy Results Statistics attribute to identify the data type.
  • # - The data type is numeric.
  • A - The data type is text.
  • Clock - The data type is time.
ACL Action Indicates the Access Control List (ACL) action OCSS applied.
Aggregated Time Indicates the time at which the record was written to the database.
Call End Time The ending time of a call.
The Call End time might not display when:
  • one of the parties has not terminated the call.
  • a network provider or a system in your organization's network has not canceled the call.
  • when OCSS has not received the call termination update to OCSS.
  • when the Session Border Controller has not sent the call termination update to OCSS.
Call Frequency Limit Exceeded Indicates that the number of successful calls made to a destination phone number exceeds the frequency threshold limit.
Call Insights Provides the following information:
  • Application-to-Person (A2P)—Reason codes specific to application-to-person messaging. For example, verification codes, appointment reminders, One Time Passcodes, verification messages, or other calls sent to a user.
  • Person-to-Person (P2P)—Reason codes specific to human-to-human calls.
  • Number Type—The line type or phone type information.
  • Activity—Reason codes related to the amount of activity OCSS observed for the number, compared to what is expected for a good user. For example, the number of communications transactions to or from the number, the quantity of unique numbers communicated with, and the number of accounts communicated with. Alert reasons and names displayed in the notification message text include:
    • ACL Match—acl match
    • ACL Match and Allow—excluded
    • CLI Spoofing Suspected—invalid numbers (to=from)
    • Country Code (Destination) Does Not Exist—invalid country code
    • International Calls Fraud Suspected—fraud-like activity
    • Suspected Fraudulent Destination—high-risk destination
    • Suspected Toll Fraud—toll fraud-like activity
    • Suspected Traffic Pumping—traffic pumping-like activity
    • TDoS Suspected—denial of service-like activity
Call Reputation Grade
The Call Reputation Grade based on the Reputation Score. The Reputation grades include:
  • Critical Risk
  • High Risk
  • Significant Risk
  • Severe Risk
  • Suspicious
  • Good
  • Acceptable
  • Unknown

Note: When the call score is -1, unknown indicates the call is blocked by the customer's blocklist and OCSS did not perform the reputation score calculation.

Call Stage The stage of the call associated with the call record. For example: initiate, mid-call (where OCSS provides an updated policy to the Session Border Controller) , terminate, and update (where the Session Border Controller sends additional information to OCSS).
Call Start Time The time at which the call started.

Note: Call Start Time always displays a value.

Call Terminate State Trigger Describes the trigger that lead the call to the determinant stage.
Call Termination Initiator Describes the actor that terminated the call. For example, the caller, callee, Session Border Controller, OCSS, or other.
Call Termination Reason Describes the reason for call termination. For example: Canceled, Bye, noAnswer, errorResponse, or other.
Call Type The call type in policy context. For example,International, Suspect, Toll Free, Premium Rate Service, and National.
Called Number The called number from the TO header of the SIP call.
Called Number Score The score assigned by OCSS to the called number.
Calling Number The calling number on record from the FROM header of the SIP call.
Calling Number Score The score assigned by OCSS to the calling number.
Carrier Name The name of the telecom carrier of record. When OCSS records do not contain carrier information for the calling number field, OCSS leaves the field empty.
Country Name The location of the Calling Number for inbound Calls.
Enforcement Action Comments about why the system applied a particular enforcement action. Comments include the following:
  • Suspected Toll Fraud
  • Suspected TDOS
  • Suspected Traffic Pumping
  • Suspected Anonymous
  • FDCPA rule enforced
  • Acl Allow Enforced
  • Blocklist Enforced
  • CLI Verification Failed
  • Score Enforced
Enforcement Action Trigger The trigger causing OCSS to apply the final outcome.
Triggers include:
  • Anonymous
  • Call center call
  • Enterprise lookup (for outbound calls)
  • Fraud risk
  • Managed list
  • Outbound call frequency limit
  • Reputation score
  • Spam risk
  • STIR TN validation unsuccessful
  • Spoofed call
  • Third party
  • Threats
Final Outcome The enforcement action OCSS applied, as determined by the Policy Decision Engine based on policy rules.
Call actions include:
  • Allow
  • Redirect
  • Reject
  • Rate limit
Ingress A call direction parameter where "true" means the call is inbound and "false" means the call is outbound.
Lookup Number The phone number sent from the Session Border Controller to the Policy Decision Engine for enforcement determination.
  • Inbound calls—When the SIP INVITE includes a P-Asserted Identity (PAI) header, OCSS sends the User portion of the PAI header in the Lookup Number field. When the SIP INVITE includes multiple PAI headers, OCSS uses the phone number of the first tel PAI header. When no tel PAI header exists, OCSS uses the User portion of the first SIP PAI header.
  • Outbound calls—OCSS sends the User portion of the TO header.
PAI Display Name The display name from the P-Asserted Identity header containing a name for the identified user.
PAI Host The host domain portion of the P-Asserted Identity header.
PAI The user portion of the P-Asserted-Identity header.
PDE Call End Time The time at which the Policy Decision Engine initiates termination of a dangling call.
PDE Server ID The unique ID of the Policy Decision Engine server. Used by Oracle personnel.
Phone Type Indicates the type of device used to make the call. Devices include Fixed Line, Pager, Restricted or Premium, Toll Free, Voice Mail, and VoIP. Other results include Other, Null, and Unavailable.
Policies Applied Policy The trigger causing OCSS to apply the final outcome determined by the Policy Decision Engine.
Triggers include:
  • Threats
  • Managed List
  • Reputation Score Action
  • Third Party
  • Enterprise Lookup
Policies Decision Indicates whether or not the Fraud Detect Rule policy was applied. Values: True | False.
Policy Response Time The number of milliseconds added to the call to send the policy request to the Policy Decision Engine, receive the policy response, and act on the response.
Policy Version The version of the applied policy.
Realm The realm for incoming and outgoing calls.
Reputation Call Score Count The distribution for the configured time period for the reputation score by Call Stage, Call Start Time, Calling Number, Carrier Name, Country Name, Enforcement Action, and Reputation Call Score.
Reputation Call Score The reputation score for the call.
SBC Receive Time The time at which the Policy Decision Engine receives the request from the Session Border Controller.
SBC Response Time The time at which the Policy Decision Engine sends the response to the Session Border Controller.
SBC Server ID The unique ID of the Session Border Controller server.
Service Provider The name of the service provider.
Session ID An encoded Base64 combination of the Call Timestamp, SBC ID, SIP Thread ID, Call ID, From tag, and Realm.
Stats ID Count Indicates the number calls based on StatsId.

Table B-2 Attributes Reserved for Oracle Personnel

Attribute Descriptions
Aggregated Time The time at which the record was written into the database. Used by the OCSS Team for tracking and debugging.
GBUA Processed Timestamp Used by the OCSS team for tracking and debugging purposes.
Reputation Call Score Count The count of the reputation score for a call.
Stats ID Count The call count number based on Stats ID.