--- title: ECG supports National Emergency Number Association (NENA) Fighting Network Attacks description: "Everyone depends on emergency calling, but the risk of cyberattack is growing. ECG is working with NENA: The 9-1-1 Association, to improve the industry's resiliance." image: https://www.ecg.co/hubfs/Blogs/Featured%20Images%20for%20Blogs/Contact%20Center/feat-contactcenter7.png --- [![ECG](https://www.ecg.co/hubfs/lp/cloud-migration/logo-vector.svg)](https://www.ecg.co) - Who We Are Company [**About ECG** Learn about the team behind the networks and services that solve real problems.](https://www.ecg.co/about) [**Careers** Join a fun, collaborative, engineer-owned company.](https://www.ecg.co/careers) Industries We Serve [**Enterprises** Optimize multi-site voice networks while meeting compliance requirements.](https://www.ecg.co/sectors/enterprise) [**Universities** Professional services designed for the unique needs of campus networks.](https://www.ecg.co/sectors/universities) [**Government** Engineering services built for government agency voice challenges.](https://www.ecg.co/sectors/government) [**Service Providers** Deep voice expertise to maintain compliance and keep customers connected.](https://www.ecg.co/sectors/service-providers) - Technologies **Carrier & Trunking Services** SIP trunking, resilience & carrier interconnect **Compliance & Call Authentication** STIR/SHAKEN, 603+ & secure signaling **Unified Communications & Collaboration** UC capabilities & platform expertise **Platform Reliability & Security** Infrastructure, capture & network fundamentals ### Carrier & Trunking Services Design, harden, and secure the carrier side of your voice network — from SIP trunking to encrypted media and compliant recording. [SIP Trunking](https://www.ecg.co/technologies/sip-trunking-consulting-expertise) [SIP Trunking High Availability](https://www.ecg.co/technologies/sip-trunking-high-availability) [STIR/SHAKEN](https://www.ecg.co/technologies/stir-shaken) [603+](https://www.ecg.co/technologies/603-plus-do-not-originate) [eSIM & FMC](https://www.ecg.co/technologies/esim-fmc) [VoIP TLS & SRTP](https://www.ecg.co/technologies/voip-encryption-tls-srtp) [SIPREC](https://www.ecg.co/technologies/siprec-call-recording) ### Compliance & Call Authentication Meet regulatory requirements end-to-end — call authentication, robocall mitigation, lawful capture, and encrypted signaling. [STIR/SHAKEN](https://www.ecg.co/technologies/stir-shaken) [603+](https://www.ecg.co/technologies/603-plus-do-not-originate) [Packet Capture / PCAP](https://www.ecg.co/technologies/pcap-wireshark-packet-capture-analysis) [VoIP TLS & SRTP](https://www.ecg.co/technologies/voip-encryption-tls-srtp) ### Unified Communications & Collaboration Modern UC capabilities backed by deep, hands-on expertise across every major voice platform. [E911](https://www.ecg.co/technologies/e911) [Business Texting](https://www.ecg.co/technologies/business-texting) [Teams Replace Phone System](https://www.ecg.co/technologies/ms-teams-replace-phone-system) [Provisioning & Endpoint Mgmt](https://www.ecg.co/technologies/sip-provisioning-endpoint-management) [Call Control & Features](https://www.ecg.co/technologies/call-control-features) [SIP Trunking HA](https://www.ecg.co/technologies/sip-trunking-high-availability) [SIPREC](https://www.ecg.co/technologies/siprec-call-recording) [vCon](https://www.ecg.co/technologies/vcon-virtualized-conversations) Platform Expertise [BroadWorks](https://www.ecg.co/technologies/broadworks) [NetSapiens](https://www.ecg.co/technologies/netsapiens-support) [Metaswitch Alianza Core](https://www.ecg.co/technologies/metaswitch-alianza-core) [Oracle Communications](https://www.ecg.co/technologies/oracle-communications-support) [Metaswitch Perimeta](https://www.ecg.co/technologies/metaswitch-perimeta) [Sansay VSXi](https://www.ecg.co/sansay-vsxi-session-border-controller) ### Platform Reliability & Security The infrastructure layer underneath your voice services — engineered, monitored, and secured by people who run it every day. [EKS / Kubernetes](https://www.ecg.co/technologies/kubernetes-eks) [Critical Network Fundamentals](https://www.ecg.co/technologies/critical-network-fundamentals) [Packet Capture / PCAP](https://www.ecg.co/technologies/pcap-wireshark-packet-capture-analysis) [VMware & Alternatives](https://www.ecg.co/technologies/vmware-alternatives) [Routing, Switching & Firewalls](https://www.ecg.co/technologies/routing-switching-firewalls) [Freeswitch](https://www.ecg.co/technologies/freeswitch-open-source-call-processing) - How We Do It Services [**Services Overview** Our experience and expertise in voice and data engineering.](https://www.ecg.co/services) [**Network Operations** Keep your voice network running with outsourced network operations.](https://www.ecg.co/services/network-operations) [**Staff Augmentation** Expert engineering support to meet deadlines and fill knowledge gaps.](https://www.ecg.co/services/staff-augmentation) [**IT Consulting & Engineering** Complete short-term projects faster with a dedicated project manager.](https://www.ecg.co/services/it-consulting-and-engineering) - Resources #### [Utilities Launch Delay Calculator Estimate what a potential product launch delay would cost your business. Try the calculator](https://www.ecg.co/cost-delay-calculator) #### [Resource Library Guides, White Papers & Tools In-depth resources on voice engineering, compliance, and AI — built from real client work. Explore resources](https://www.ecg.co/resource-library) #### [Blog Latest from the ECG Team Practical articles on SIP, UC platforms, network operations, and voice AI. Read the blog](https://www.ecg.co/blog) - [Events](https://www.ecg.co/events) [Login](https://portal.ecg.co) [Contact](https://www.ecg.co/contact) Who We Are [About ECG](https://www.ecg.co/about) [Careers](https://www.ecg.co/careers) Industries We Serve [Enterprises](https://www.ecg.co/sectors/enterprise) [Universities](https://www.ecg.co/sectors/universities) [Government](https://www.ecg.co/sectors/government) [Service Providers](https://www.ecg.co/sectors/service-providers) Technologies Carrier & Trunking Services [SIP Trunking](https://www.ecg.co/technologies/sip-trunking-consulting-expertise) [SIP Trunking High Availability](https://www.ecg.co/technologies/sip-trunking-high-availability) [STIR/SHAKEN](https://www.ecg.co/technologies/stir-shaken) [603+](https://www.ecg.co/technologies/603-plus-do-not-originate) [eSIM & FMC](https://www.ecg.co/technologies/esim-fmc) [VoIP TLS & SRTP](https://www.ecg.co/technologies/voip-encryption-tls-srtp) [SIPREC](https://www.ecg.co/technologies/siprec-call-recording) Compliance & Call Authentication [STIR/SHAKEN](https://www.ecg.co/technologies/stir-shaken) [603+](https://www.ecg.co/technologies/603-plus-do-not-originate) [Packet Capture / PCAP](https://www.ecg.co/technologies/pcap-wireshark-packet-capture-analysis) [VoIP TLS & SRTP](https://www.ecg.co/technologies/voip-encryption-tls-srtp) Unified Communications & Collaboration [E911](https://www.ecg.co/technologies/e911) [Business Texting](https://www.ecg.co/technologies/business-texting) [Teams Replace Phone System](https://www.ecg.co/technologies/ms-teams-replace-phone-system) [Provisioning & Endpoint Mgmt](https://www.ecg.co/technologies/sip-provisioning-endpoint-management) [Call Control & Features](https://www.ecg.co/technologies/call-control-features) [SIP Trunking HA](https://www.ecg.co/technologies/sip-trunking-high-availability) [SIPREC](https://www.ecg.co/technologies/siprec-call-recording) [vCon](https://www.ecg.co/technologies/vcon-virtualized-conversations) Platform Expertise [BroadWorks](https://www.ecg.co/technologies/broadworks) [NetSapiens](https://www.ecg.co/technologies/netsapiens-support) [Metaswitch Alianza Core](https://www.ecg.co/technologies/metaswitch-alianza-core) [Oracle Communications](https://www.ecg.co/technologies/oracle-communications-support) [Metaswitch Perimeta](https://www.ecg.co/technologies/metaswitch-perimeta) [Sansay VSXi](https://www.ecg.co/sansay-vsxi-session-border-controller) Platform Reliability & Security [EKS / Kubernetes](https://www.ecg.co/technologies/kubernetes-eks) [Critical Network Fundamentals](https://www.ecg.co/technologies/critical-network-fundamentals) [Packet Capture / PCAP](https://www.ecg.co/technologies/pcap-wireshark-packet-capture-analysis) [VMware & Alternatives](https://www.ecg.co/technologies/vmware-alternatives) [Routing, Switching & Firewalls](https://www.ecg.co/technologies/routing-switching-firewalls) [Freeswitch](https://www.ecg.co/technologies/freeswitch-open-source-call-processing) How We Do It Services [Services Overview](https://www.ecg.co/services) [Network Operations](https://www.ecg.co/services/network-operations) [Staff Augmentation](https://www.ecg.co/services/staff-augmentation) [IT Consulting & Engineering](https://www.ecg.co/services/it-consulting-and-engineering) Resources [Launch Delay Calculator](https://www.ecg.co/cost-delay-calculator) [Guides, White Papers & Tools](https://www.ecg.co/resource-library) [Latest from the ECG Team](https://www.ecg.co/blog) [Events](https://www.ecg.co/events) [Login](https://portal.ecg.co) [Contact](https://www.ecg.co/contact) # ECG supports National Emergency Number Association (NENA) Fighting Network Attacks By: Mark Lindsey 3 min read Nov 6, 2025 ![NENA: The 9-1-1 Association](https://www.ecg.co/hs-fs/hubfs/nena-ish.png?width=400&height=164&name=nena-ish.png)When you make an emergency call like 911 in America, you need to get to a Life-Saving Call Taker at an Emergency Call Center (ECC) or Public Safety Answering Point (PSAP). And to do that, the 911 network has to be functioning, whether it's classic E911 over TDM, or NG911 over IP. But what if the PSAP is under attack?  NENA: The 9-1-1 Association issued its Third Annual report, "Pulse of 9-1-1" reporting that in the past year, [nine percent of Public Safety Answering Points experienced a Telephony Denial of Service (TDoS) or other cyberattack.](https://carbyne.com/resources/press/third-annual-pulse-of-9-1-1-report-finds-burnout-cyber-vulnerabilities-and-outdated-technology-threaten-emergency-service-readiness/) For example, in August this year,[authorities reported an potential attack from a group with links to Russia against a 911 contact center in Massachusetts.](https://www.nbcboston.com/news/local/south-shore-mass-911-dispatch-cyber-incident/3783801) One form of Telephony Denial of Service (TDoS) attack occurs when an attacker launches so many calls against a PSAP that the system is overloaded. One way of doing this would be to triggering users' devices in a single geographic area to launch calls to 911. Another form would be to trigger the a small number of users, a single enterprise customer, for example, to launch many calls in rapid succession.  ## ECG's Work Developing Informational Standards NG911 systems, which are based on IP networking, bring a new era of technology. The SIP Standards, Session Border Controllers, software-based call processing systems, are all new and subject to new risks from bad actors (cyber-attackers). ECG worked with NENA: The 9-1-1 Association as an expert source in the standard [NENA-INF-045.1-2025: Telephony Denial of Service (TDoS) Information Document](https://www.nena.org/page/standards) (issued 2022, re-affirmed this year.) ## Surprising Realities about the  Telephony Denial of Service (TDoS) Risk ### E9-1-1 (using TDM) has essentially no viable TDoS Mitigation Today's E9-1-1 systems based on TDM have no real way to handle calling overloads. They cannot meaningfully filter calls, and cannot distinguish attack vs valid traffic. E9-1-1 uses a system of signaling the caller number, CAMA, developed in the 1970s. Local Routers (LRs) that process the calls in E9-1-1 have to allocate a call path for each attack call and wait at least until the calling party number is outpulsed before applying logic to determine if this is a problematic calling party number. ### Real TDoS attacks often don't spoof caller ID. When an attacker compromises legitimate devices on a network, they do not have to spoof caller ID to launch telephony denial of service attacks. For example, if 10,000 unpatched Fiber-to-the-Home Optical Network Terminals (ONTs) providing voice service are simultaneously attacked and triggered to launch 911 calls, then those calls would come from 10,000 different calling party numbers.  ### Synthetic attacks can rotate spoofed numbers on every call. When an attacker generates new traffic, for example on a compromised, unscreened PBX trunk, they can generate a new spoofed calling party number for each call. This makes filtering based on the calling party number functionally impossible. ### NG9-1-1 "Bad Actor" filtering is defined in the standard, but not widely deployed. The NENA i3 "Bad Actor" functionality allows a PSAP to filter calls based on calling party number (CBN) or some other value present in the incoming calls, such as a consistent P-Asserted-Identity. This filter defines the calling party, and blocks all calls that include this matching value. ### STIR/SHAKEN cannot authenticate calls that touch TDM E9-1-1 networks. Even when STIR/SHAKEN is present on 9-1-1 calls, if they flow through a TDM segment of the network, then the STIR/SHAKEN header information can be lost.  ### High-Volume TDoS Mitigation uses Internet DDoS scrubbing infrastructure. Internet DDoS Mitigation generally uses BGP reroute functionality to send traffic through a scrubbing service. To use this, ESInets must be capable of supporting BGP reroute, and have access to these online resources. But many ESInets are not built with BGP reroute and DDoS mitigation. ### A single ESInet with national call diversion could theoretically handle extremely large attacks. National Call Diversion can be arranged in advance by a PSAP. It allows an overloaded PSAP/ECC to reroute calls to other ECC's around the country so that other call takers can process calls. For example, the PSAPs of the New York City area could reroute calls to other parts of the state or the country. But this must be configured in advance. ### There is virtually nothing available in SIP spoofing detection - except for STIR/SHAKEN. STIR/SHAKEN Call authentication is not required for 9-1-1 calls today. Right now, even for calls going into NG9-1-1 networks, STIR/SHAKEN Call Authentication can be helpful but it's not strictly required. This is partly because a large number of calls in the USA do not have STIR/SHAKEN capability, due to TDM trunks.  ## ECG Gladly Supports 9-1-1 Infrastructure The ECG team is glad to support public safety in designing, improving and troubleshooting IP based 9-1-1 systems. ECG consults for both Service Providers, Public Sector organizations, and Enterprises on reliable implementation of critical communications, regardless of vendor.   [e911](https://www.ecg.co/blog/tag/e911) [Emergency Calls](https://www.ecg.co/blog/tag/emergency-calls) [Public Safety](https://www.ecg.co/blog/tag/public-safety) ## Similar posts [![Using SIP to Block Robocalling: On the Telephone, Nobody Knows You're](https://www.ecg.co/hubfs/Imported_Blog_Media/regular_lindsey2016robocalling_hand_dialing-1.png)](https://www.ecg.co/blog/123-using-sip-to-block-robocalling-on-the-telephone-nobody-knows-you-re-a-robot) ### [Using SIP to Block Robocalling: On the Telephone, Nobody Knows You're](https://www.ecg.co/blog/123-using-sip-to-block-robocalling-on-the-telephone-nobody-knows-you-re-a-robot) [![Quality: Required. QoS: Never. (Quality VoIP Across the Public](https://www.ecg.co/hubfs/ecg-site/blog-listing-placeholder.jpg)](https://www.ecg.co/blog/103-quality-required-qos-never-quality-voip-across-the-public-internet) ### [Quality: Required. QoS: Never. (Quality VoIP Across the Public](https://www.ecg.co/blog/103-quality-required-qos-never-quality-voip-across-the-public-internet) [![Mobile-First Your Voice Network with eSIM, not Apps](https://www.ecg.co/hubfs/Blogs/Featured%20Images%20for%20Blogs/Mobile%20Workers/feat-mobileworker4.png)](https://www.ecg.co/blog/esim-fmc-mobile-cellular-voip) ### [Mobile-First Your Voice Network with eSIM, not Apps](https://www.ecg.co/blog/esim-fmc-mobile-cellular-voip) ## Need Help With Your Network or AI Project? Get expert advice from engineers who've solved complex problems for carriers, enterprises, and government agencies. [Let's Talk](https://www.ecg.co/contact) [![ecg-logo-white](https://www.ecg.co/hubfs/ecg-site/global/ecg-logo-white.svg "ecg-logo-white")](http://ECG,%20Inc) 505 North Toombs St. Suite A Valdosta, Georgia 31601 USA #### Headquarters [![](https://www.ecg.co/hs-fs/hubfs/ECG_hexagons_and_url_borderless.jpeg?width=465&height=289&name=ECG_hexagons_and_url_borderless.jpeg)](http://ECG,%20Inc) - 1.866.324.0700 US Toll-free - 1.229.244.2099 International - 1.229.244.2399 Fax - [info@e-c-group.com](mailto:info@e-c-group.com) #### Services [![](https://www.ecg.co/hs-fs/hubfs/ECG_hexagons_and_url_borderless.jpeg?width=465&height=289&name=ECG_hexagons_and_url_borderless.jpeg)](http://ECG,%20Inc) - [Overview](https://www.ecg.co/services) - [Network Operations](https://www.ecg.co/services/network-operations) - [Custom AI Development](https://www.ecg.co/services/custom-ai-development) - [Outsourced NOC Support](https://www.ecg.co/services/outsourced-noc-support) - [Staff Augmentation](https://www.ecg.co/services/staff-augmentation) - [IT Consulting & Engineering](https://www.ecg.co/services/it-consulting-and-engineering) #### Company [![](https://www.ecg.co/hs-fs/hubfs/ECG_hexagons_and_url_borderless.jpeg?width=465&height=289&name=ECG_hexagons_and_url_borderless.jpeg)](http://ECG,%20Inc) - [About](https://www.ecg.co/about) - [Careers](https://www.ecg.co/careers) - [Blog](https://www.ecg.co/blog) - [Resources](https://www.ecg.co/resource-library) - [Events](https://www.ecg.co/events) © ECG, Inc. [Privacy Policy](https://9353907.hs-sites.com/privacy) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mark Lindsey", "url" : "https://www.ecg.co/blog/author/mark-lindsey" }, "dateModified" : "2025-11-06T20:35:04.197Z", "datePublished" : "2025-11-06T20:35:04.000Z", "headline" : "ECG supports National Emergency Number Association (NENA) Fighting Network Attacks", "image" : [ "https://www.ecg.co/hubfs/Blogs/Featured%20Images%20for%20Blogs/Contact%20Center/feat-contactcenter7.png" ], "mainEntityOfPage" : { "@id" : "https://www.ecg.co/blog/ecg-supports-national-emergency-number-association-nena-fighting-network-attacks", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.ecg.co/hubfs/ECG_hexagons_and_url_borderless.jpeg" }, "name" : "ECG, Inc" } } ```