1 Security Shield Security Overview

Oracle Communications Security Shield Cloud Service (Security Shield) is service that can evaluate every SIP call crossing a telephony network boundary and generate a risk assessment score for each call. The Security Shield dynamically determines the risk score for a call to provide you with an enhanced trust level for the call. The enhanced data may include a score that uses data about the caller's frequency of calls, presence on a block list or caution (suspicion) list, and reputation. To make use of the risk score, the Security Shield service contains a policy manager where you define how you want the Security Shield to respond to risky calls and sessions. The Security Shield deployment model disperses the components in a way that uses on-premises products, such as the Session Border Controller, with a cloud service overlay.

In the following high-level diagram of an Security Shield deployment, the Cloud Communication Service (CCS) and the Session Border Controller (SBC) reside on premises.

This illustration shows a typical OCSSC deployment, where the Session Border Controller and Cloud Communication Service are located on premises, while the Dashboard and lookup service are located in the Oracle Cloud.

While the security for Security Shield cloud components in the Oracle Cloud is mainly Oracle's responsibility, the overall Security Shield security is a joint effort between Oracle and our customers. Especially, for the on-premises components (CCS and SBC).

For information about securing the Oracle® Enterprise Session Border Controller, see the Oracle Communications Session Border Controller Security Guide.