Phone¶

The Phone asset type in the OWASP Open Asset Model (OAM) represents a structured phone number associated with a person, organization, or service. This includes landlines, mobile phones, and fax numbers, supporting international formats and extensions.

Definition: A Phone asset includes raw and standardized (E.164) representations of phone numbers, along with metadata such as type (e.g., mobile or fax), country code, and optional extension.
Purpose: Phone numbers are valuable in OSINT investigations, phishing detection, social engineering risk analysis, and mapping communications infrastructure. Modeling them as first-class assets allows for clear linkage to entities and tracing how they appear across datasets.
Design Choice: The model uses the E.164 international standard to normalize phone numbers for global consistency. A Type field supports differentiation between regular, mobile, and fax numbers, enabling more nuanced analysis and relation modeling.

In summary, the Phone asset type brings structure and semantic clarity to phone number data, providing essential context for investigative and security workflows in the OAM.

Phone Attributes¶

Attributes	Type	Description
`type`	string	Type of phone number — `phone`, `fax`, or `mobile`
`raw`	string	Original, unprocessed string version of the number
`e164`	string	Standardized E.164 format (e.g., `+14155552671`)
`country_abbrev`	string	ISO 3166-1 alpha-2 country abbreviation (e.g., `US`)
`country_code`	int	Country dialing code (e.g., `1` for the US)
`ext`	string	Phone extension, if applicable (e.g., `x1234`)

Phone Properties¶

Property Type	Property Name	Description
`SimpleProperty`	`last_monitored`	Tracks when a data source was last queried regarding this Phone
`SourceProperty`	Source Plugin Name	Indicates that the specified data source discovered this Phone

Phone Outgoing Relations¶

graph TD
phone["Phone (+1-415-555-2671)"]
acct["Account"]
account@{ shape: braces, label: "account" }
phone --o account
account --> acct

contactrec["ContactRecord"]
contact@{ shape: braces, label: "contact" }
phone --o contact
contact --> contactrec

Relation Type	Relation Label	Target Assets	Description
`SimpleRelation`	`account`	`Account`	Links the `Phone` number to a customer account
`SimpleRelation`	`contact`	`ContactRecord`	Links the `Phone` number to additional customer information