RSA ® Web Threat Detection is upgraded with new capabilities and analysis tools to better detect mobile fraud
The news in brief:
- Leveraging Big Data analytics, RSA® Web Threat Detection is designed to enable security managers to analyze millions of web sessions and gain insight into online threats, potential abuse of business logic, and any suspicious activity – in real time.
- As mobile transactions increased by more than 50% in a year, the ability to monitor traffic originating from mobile applications creates an additional layer of protection against threats carried out by this increasingly popular communication channel.
- A new dashboard helps analysts distinguish a user's abusive behavior and isolate it very quickly.
- The new version of RSA Web Threat Detection continues RSA's tradition of offering Intelligence-Driven security solutions that help businesses respond to the battle against modern online threats.
Full Topic:
RSA, the Security Applications division of EMC, announced that the new version of RSA Web Threat Detection is designed to provide full visibility into web sessions, helping enterprises protect the pages open to their customers from online fraud or circumvention of corporate policies.
Beyond the classic capabilities offered by traditional tools, RSA Web Threat Detection helps businesses address virtually any online threat in real time, whether it is in the preliminary stage or in full development. With the latest version, the ability to monitor a web session in real time is upgraded and new tools are added to control mobile traffic and detect any attempt that may be made by a user while he remains online. The process of identifying a potential threat becomes even more accurate, while the addition of information about web sessions to the protection mechanism unifies the enterprise's IT security strategy in today's hyper-networked environment.
Better visibility and correlation with BigData
RSA Web Threat Detection is designed to add visibility and tools that help security managers gain insight and analyze millions of web sessions to detect potential online threats, abuse of business logic, and generally any malicious behavior – all as they happen. The continuous monitoring and analysis of a web session can be combined with other BigData tools to provide even more effective cross-channel analysis and a better understanding of threats to the business, its customers, and its corporate reputation. By correlating information about online activity (web intelligence) with data from other security platforms (security analytics), organizations can identify, classify, and neutralize threats more easily and clearly.
RSA Web Threat Detection groups threats with common characteristics (threat groups) in real time, and leverages BigData tools to identify groups of users or IP addresses with suspicious behavior, making it more effective to detect malicious activities and/or the users involved in them. Security managers can quickly conduct checks to determine whether a web session is part of a threat group that requires further investigation. Once an attack is identified, RSA Web Threat Detection is designed to automatically detect and group any attacks with similar characteristics. In addition, thanks to the increased capabilities of analyzing the history of movements of a specific profile (user), including old or new usernames and IP addresses, organizations can very quickly identify individual incidents of strange behavior in order to take appropriate actions.
The rise of MobileFraud
As mobile communication continues to grow rapidly, this channel is also an attractive vehicle for would-be hackers. According to RSA (Office of the CTO), in 2013, the percentage of transactions made via mobile reached 27%, recording an increase of almost 54% year-on-year. Even more alarming is the fact that almost 32% of all e-fraud incidents recorded by RSA in the first half of 2014 originated from a mobile device. For this reason, RSA Web Threat Detection is designed to enable enterprises to better monitor traffic from mobile applications and create specific rules that will help them identify and prevent threats that are about to manifest themselves through this particular avenue. The real-time correlation of a user's activity across different fixed and mobile internet access channels allows businesses to identify potential risks with even greater accuracy, so that they are able to follow the continuous development of that specific channel without additional risk.
Finding fleas in the haystacks
The redesigned user interface, with the new Analyst Summary Dashboard, reduces the time required to investigate an attack, as it helps managers decide when they need to focus more on an incident.
There is so much daily activity on websites and portals that it is almost impossible to separate malicious behavior from normal customers. However, each malicious user operates differently and leaves behind specific traces. Integrating tools such as real-time Risk Indicators, Threat Scores and historical activity on one screen, the RSA Web Threat Detection dashboard is built precisely to enable rapid detection of any threat as it evolves. Visualizing information from web intelligence helps security managers find “a flea in a haystack,” even when they are not sure what that “flea” looks like.
RSA Web Threat Detection is designed to provide complete visibility into a web or mobile session, translating clickstream data into actionable insights that help organizations distinguish between legitimate and malicious behavior in real time and stop threats before they escalate. Protecting more than $200 billion in transactions annually, RSA Web Threat Detection is capable of detecting potential threats in real time and performing forensic fraud analysis, making it the go-to solution for many large organizations to monitor multiple communication channels simultaneously to prevent cross-channel fraud. Adding web session intelligence and threat detection tools to an organization’s security architecture helps organizations identify online threats faster by correlating data across their entire enterprise infrastructure.
Analysts' comments:
Dave Monahan, Director of Security and Risk Management at Enterprise Management Associates
“Every minute, malicious users target the websites of various businesses, taking the first step in a wider-scale attack. In order to reduce their risk, businesses should be able to not only block any attacks but also monitor what is happening on their entire website, before and after a specific user logs in. Only complete visibility can help a business protect its customers and its corporate reputation from the consequences of an online fraud.”.
Comments from RSA:
Grant Geyer, Vice Presidentat RSA Security Analytics
“As more and more online threats focus on portal and mobile channels, businesses need to be able to monitor the evolution of an online activity to protect customers and their corporate reputation. RSA Web Threat Detection is designed to provide complete visibility, through the analysis of click stream data of a web/mobile session, and its translation into information that helps separate legitimate from malicious behavior. Complete visibility of a user's online behavior, before, during, and after authentication, gives businesses the ability to detect, in real time, any abnormal behavior and reduce the risk of fraud, abuse of business logic or other malicious activity, making their infrastructure protection mechanism even more effective.”.
About RSA
RSA, the Security division of EMC, is the largest provider of intelligent solutions for protecting and securing IT infrastructure. RSA helps the world's largest companies solve the most complex and sensitive security challenges, including managing business risk, securing mobile access, preventing online fraud, and protecting against modern and advanced threats.
By combining flexible solutions for securing the identity of authorized users, preventing cyber risks and protecting data, with leading GRC capabilities, powerful Security Analytics tools and high-level consulting services, RSA creates a sense of trust for millions of users in the transactions they make, the data generated by those transactions and the IT infrastructures on which they rely. For more information, please visit www.EMC.com/RSA.
About EMC2
EMC Corporation is a global leader in IT, enabling businesses and service providers to transform their operations and deliver IT applications as a service . Cloud computing is a fundamental part of this transformation process . Through innovative products and services, EMC accelerates the transition to cloud computing , helping an organization's IT department store, manage, protect and analyze information, the most valuable asset of a business, in a more flexible, secure and cost-effective way. More information about EMC can be found at: https://greece.emc.com/
EMC Hellas S.A.
Nellie Zachari, tel: 210 6147387 – Nellie.Zachari@emc.com
CIVITAS Ketchum SA.
Nikos Patrinos, tel: 210 6852400 – n.patrinos@civitas.gr
