System and method for audio fingerprinting for attack detection
A method, computer program product, and computer system directed toward identification of potential social engineering activity associated with at least a portion of a communication on a communication channel based upon, at least in part, a match between a first set of audio features with a second set of one or more audio features. The first set of one or more audio features are extracted from at least a portion of a communication on a communication channel. The first set of one or more audio features from at least a portion of the communication are compared to a second set of one or more audio features to determine that at least a portion of the first set of audio features matches the second set of one or more audio features.
1. A computer-implemented method comprising:
extracting, by a computing device, a first set of one or more audio features from at least a portion of a real-time communication on a communication channel, wherein extracting the first set of one or more audio features includes at least one of generating an audio fingerprint of at least the portion of the real-time communication on the communication channel and transcribing at least the portion of the real-time communication on the communication channel;
comparing the first set of one or more audio features from at least the portion of the real-time communication to a second set of one or more audio features from at least a portion of a previous real-time communication;
determining that at least a portion of the first set of one or more audio features matches the second set of one or more audio features;
identifying a potential social engineering attack connected to social engineering activity associated with at least the portion of the real-time communication on the communication channel responsive to, at least in part, matching the first set of one or more audio features from at least the portion of the real-time communication with the second set of one or more audio features from at least the portion of the previous real-time communication; and
performing an action responsive to, at least in part, identifying the potential social engineering attack connected to the social engineering activity associated with at least the portion of the real-time communication on the communication channel, wherein performing the action include providing an alert of the potential social engineering attack.
2. The computer-implemented method of claim 1 wherein the first set of one or more audio features is based upon, at least in part, an audio characteristic of the real-time communication.
3. The computer-implemented method of claim 2 wherein the audio characteristic includes at least one of tone and cadence of a voice identified during the real-time communication.
4. The computer-implemented method of claim 1 wherein at least one of the features of the first set of one or more audio features includes intent.
5. The computer-implemented method of claim 1 wherein at least a portion of the first set of one or more features is extracted across multiple communications on the communication channel.
6. A computer program product residing on a non-transitory computer readable storage medium having a plurality of instructions stored thereon which, when executed across one or more processors, causes at least a portion of the one or more processors to perform operations comprising:
extracting, by a computing device, a first set of one or more audio features from at least a portion of a real-time communication on a communication channel, wherein extracting the first set of one or more audio features includes at least one of generating an audio fingerprint of at least the portion of the real-time communication on the communication channel and transcribing at least the portion of the real-time communication on the communication channel;
comparing the first set of one or more audio features from at least the portion of the real-time communication to a second set of one or more audio features from at least a portion of a previous real-time communication;
determining that at least a portion of the first set of one or more audio features matches the second set of one or more audio features;
identifying a potential social engineering attack connected to social engineering activity associated with at least the portion of the real-time communication on the communication channel responsive to, at least in part, matching the first set of one or more audio features from at least the portion of the real-time communication with the second set of one or more audio features from at least the portion of the previous real-time communication; and
performing an action responsive to, at least in part, identifying the potential social engineering attack connected to the social engineering activity associated with at least the portion of the real-time communication on the communication channel, wherein performing the action include providing an alert of the potential social engineering attack.
7. The computer program product of claim 6 wherein the first set of one or more audio features is based upon, at least in part, an audio characteristic of the real-time communication.
8. The computer program product of claim 7 wherein the audio characteristic includes at least one of tone and cadence of a voice identified during the real-time communication.
9. The computer program product of claim 6 wherein at least one of the features of the first set of one or more audio features includes intent.
10. A computing system including one or more processors and one or more memories configured to perform operations comprising:
extracting, by a computing device, a first set of one or more audio features from at least a portion of a real-time communication on a communication channel, wherein extracting the first set of one or more audio features includes at least one of generating an audio fingerprint of at least the portion of the real-time communication on the communication channel and transcribing at least the portion of the real-time communication on the communication channel;
comparing the first set of one or more audio features from at least the portion of the real-time communication to a second set of one or more audio features from at least a portion of a previous real-time communication;
determining that at least a portion of the first set of one or more audio features matches the second set of one or more audio features;
identifying a potential social engineering attack connected to social engineering activity associated with at least the portion of the real-time communication on the communication channel responsive to, at least in part, matching the first set of one or more audio features from at least the portion of the real-time communication with the second set of one or more audio features from at least the portion of the previous real-time communication; and
performing an action responsive to, at least in part, identifying the potential social engineering attack connected to the social engineering activity associated with at least the portion of the real-time communication on the communication channel, wherein performing the action include providing an alert of the potential social engineering attack.
11. The computing system of claim 10 wherein the first set of one or more audio features is based upon, at least in part, an audio characteristic of the real-time communication.
12. The computing system of claim 11 wherein the audio characteristic includes at least one of tone and cadence of a voice identified during the real-time communication.
13. The computing system of claim 10 wherein at least one of the features of the first set of one or more audio features includes intent.
14. The computing system of claim 10 further comprising a virtual agent for at least one of monitoring and controlling the operations.