STIR/SHAKEN (Secure Telephone Identity Revisited / Signature-based Handling of Asserted information using toKENs)

Also known as: STIR, SHAKEN, RFC 8224, RFC 8225

STIR/SHAKEN is the caller ID authentication framework for SIP-based voice networks. STIR (IETF RFC 8224/8225) defines PASSporT tokens signed by the originating provider that assert the calling number and an attestation level (A, B or C). SHAKEN (ATIS) is the North American deployment profile covering certificate governance, SIP Identity header transport across interconnects and verification at the terminating side, aimed at curbing illegal caller ID spoofing and robocalling.

Categories: SignalingSecurity ControlsThreats and Attacks

STIR/SHAKEN in context

Signaling protocols carry the control-plane instructions that set up calls, register subscribers, hand over sessions and route SMS. SS7, Diameter, GTP-C and SIP are the four dominant families, and interconnect exposure of any of them is treated by GSMA FS.11 / FS.19 / FS.20 as a top-tier telecom risk.

Security controls in telecom span signaling firewalls (SS7/Diameter/GTP screening at the network edge), transport encryption (IPsec, TLS, PRINS), identity and access on OSS/BSS, and monitoring at both the packet and log level. Controls are audited against GSMA FS.11/FS.19/FS.20/FS.36 and, in Europe, NIS2 sectoral rules.

To place STIR/SHAKEN in the wider telecom-security picture, review STIR, Global Title Abuse, ISUP, SIP, RTP and CLI Spoofing.

Related terms

Related topic hubs

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.