Modernizing SIP routing: protecting softswitches from fraud
Protecting operator voice traffic from fraud and spoofing by transitioning to component-based architecture and implementing cryptographic call validation.
Anton Marrero6 min readCONTROLLED FINANCE
Compliance and risk
Practical guidance on management accounting, budgeting, treasury, period close, financial controls and evidence-based AI.
Choose a topic
78 publications
Anton Marrero6 min readProtecting telecom networks from signaling fraud: SS7, Diameter, and SIP security architecture
An analysis of signaling protocol vulnerabilities and methods for building architectural defenses against fraud in telecommunications networks.
Mykhailo Vyhovsky8 min readSignaling security and anti-fraud in operator networks
An overview of securing SS7 and Diameter signaling protocols. How telecom operators can counter IRSF and Wangiri fraud schemes to ensure network integrity.
Anton Marrero8 min readIAM and PAM: Stopping Privilege Creep and Ensuring Secure Off-boarding
How to build a controlled identity lifecycle, implement regular access reviews, and eliminate "orphaned" access vulnerabilities to protect against cyber threats.
Mykhailo Vyhovsky6 min readOT/IIoT cybersecurity: Protecting critical infrastructure for NIS2
How to secure industrial legacy systems and meet NIS2 requirements without disrupting production processes.
Mykhailo Vyhovsky5 min readIntegrating IoT with SCADA: Architectural balance of IT/OT convergence
How to combine the flexibility of cloud-based IoT analytics with the strict availability requirements of SCADA systems without risking the shutdown of critical industrial processes.
Anton Marrero5 min readSignaling security in telecom: from hybrid threats to 5G architecture
The transition to 5G does not eliminate signaling security threats. Coexistence with legacy protocols like SS7 and Diameter requires end-to-end monitoring and integrated signaling firewalls.
Anton Marrero7 min readAnti-fraud in telecom: integrating billing and softswitch
How to build low-latency integration of the signaling core, billing, and anti-fraud systems to block IRSF and other fraud in real time.
Serhiy Balashuk7 min readArchitecture of carrier SIP routing: protecting voice cores from fraud
We examine carrier SIP routing architecture and methods for protecting voice cores from fraud by integrating MNP, billing systems, and cryptographic verification.
Serhiy Balashuk6 min readCloud overspending: how to curb over-provisioning and zombie resources
Analyzing cloud architectural errors: from over-provisioning to uncontrolled scaling, and exploring practical mitigation methods through FinOps and proper governance.
Yuriy Syvytsky7 min readIncident response: the first 24 hours and regulatory requirements
How to balance technical cyberattack containment with strict compliance reporting requirements during the critical first 24 hours after threat detection.
Anton Marrero7 min readThe compliance trap: why SIEM and certification do not guarantee operational resilience
We analyze common pitfalls in implementing monitoring tools and certifications without making real changes to daily security team processes.
Mykhailo Vyhovsky6 min read