Abstract: It is an object of the presently disclosed subject matter to provide billing and usage data to downstream applications. According to one aspect, the subject matter described herein includes a method for acquiring billing and usage data in an IP multimedia subsystem (IMS) environment. The method includes copying at least one of a call signaling message and an IMS accounting message relating to an IMS transaction upstream from a billing system (BS) and providing the at least one copied message to an application for one of billing verification, fraud detection, revenue assurance, and data analysis. The types of acquired data may be copied separately or in combination, and the copied data may be examined, compared, or otherwise utilized separately or in combination.

Abstract: Methods, systems, and computer program products for detecting fraudulent message service message traffic are disclosed. According to one method, message service messages are monitored. It is determined that the message service message traffic indicates that the message service message traffic is fraudulent based on detection of at least one of: 1) message service message traffic received at a first network from a second network, where the traffic includes at least one message with an SCCP calling party address internal to the first network, 2) a volume of message service message traffic received at the first network from the second network that exceeds the volume of message service message traffic sent by the first network to the second network by a threshold amount, and 3) message service message traffic that is sent to a dark number. In response to detecting fraudulent message service message traffic, a mitigating action is performed.

Abstract: Methods, systems, and computer program products for analyzing signaling messages associated with delivery of streaming media content to subscribers via a broadcast and multicast service (BCMCS) are disclosed. According to one method, at least one signaling message transmitted between network elements associated with delivery of streaming media content to a subscriber via a BCMCS is monitored. The at least one signaling message is analyzed. Information resulting from the analysis is provided to at least one BCMCS data processing application.

Abstract: Methods, systems, and computer program products for providing media content delivery audit and verification services are disclosed. In one example, a monitoring system analyzes messages associated with communications in a wireless communications network. The monitoring system identifies, from the messages, messages that are associated with the request for or delivery of media content to a wireless communications device via the network. Copies of the messages relating to media content delivery are generated, correlated, and analyzed in order to provide a network operator with information that may be used to verify media content delivery transactions and associated revenues.

Abstract: Methods, systems, and computer program products for detecting and mitigating a denial of service attack in a telecommunications signaling network are provided. According to one method, traffic rate information is monitored on at least two of a plurality of signaling links. If the traffic rate on one of the signaling links exceeds the rate on at least another of the signaling links by a predetermined threshold, a denial of service attack is indicated. In response to indicating a denial of service attack, a user may take mitigating action, such as updating a firewall function to block packets associated with the offending source.

Abstract: Methods, systems, and computer program products for providing media content delivery audit and verification services are disclosed. In one example, a monitoring system analyzes messages associated with communications in a wireless communications network. The monitoring system identifies, from the messages, messages that are associated with the request for or delivery of media content to a wireless communications device via the network. Copies of the messages relating to media content delivery are generated, correlated, and analyzed in order to provide a network operator with information that may be used to verify media content delivery transactions and associated revenues.

Abstract: Methods, systems, and computer program products for detecting wireless bypass in a communications network is described. In one embodiment, the method includes analyzing at least one of wireless signaling message traffic in a wireless communications network, financial information regarding wireless communications network subscriptions, and subscriber records maintained in the wireless communications network. The method also includes determining, based on the analysis, whether a wireless bypass signature is indicated. In response to determining that a wireless bypass signature is indicated, a mitigating action is performed.

Abstract: Methods, systems, and computer program products for detecting and mitigating a ping call event in a communications system is described. In one embodiment, the method includes receiving a plurality of call signaling messages. The plurality of call signaling messages are analyzed and a determination is made as to whether at least a portion of the plurality of call signaling messages indicates a ping call event. In response to determining that the at least a plurality of call signaling messages indicates a ping call event, a mitigating action is performed.

Abstract: It is an object of the presently disclosed subject matter to provide billing and usage data to downstream applications. According to one aspect, the subject matter described herein includes a method for acquiring billing and usage data in an IP multimedia subsystem (IMS) environment. The method includes copying at least one of a call signaling message and an IMS accounting message relating to an IMS transaction upstream from a billing system (BS) and providing the at least one copied message to an application for one of billing verification, fraud detection, revenue assurance, and data analysis. The types of acquired data may be copied separately or in combination, and the copied data may be examined, compared, or otherwise utilized separately or in combination.