Page 21 - White Papers in Fraud Management & Cybercrime

Ponemon Institute Research Report: What IT Users and Business Users Think about Bring Your Own Identity (BYOID)

While Bring Your Own Identity (BYOID) can deliver tangible benefits to end users and relying parties, these benefits are accompanied with potential risks and liability concerns. CA Technologies and The Ponemon Institute recently conducted a worldwide survey of over 3,000 IT and business users and decision makers to...

EMV Adoption and Its Impact on Fraud Management

As industry participants are beginning to prepare for the US card payments ecosystem to migrate to EMV (Europay, MasterCard, Visa), the role of the EMV standard in fraud control is not so clear. While we know that one of the key benefits of EMV is its ability to prevent fraud, can it prevent all fraud types? The EMV...

Enabling Painless Consumer Authentication: Shared Trust Intelligence

All organizations with an on-line presence need to quickly and efficiently detect hackers and fraudsters. However, to avoid frustrating the very people you want to feel welcome, it's critical that authentication processes be as simple as possible. The newest generation of authentication technology utilizes shared...

Cybercrime Report Q4 2014

Today's cybercriminals are talented, organized, efficient, and well-funded. In the last year, they have successfully attacked numerous retail and financial organizations, taking personal and financial data of hundreds of millions of consumers to fraudulently open new accounts, take over existing accounts and commit...

Reducing Security Risks from Open Source

Open source software is a game-changer in helping development organization herd their application security risks. But they can also introduce risk when employed without adequate precautions. However, by following a few strategies, your organization can gain the full benefits of open source and the cloud without...

Card-Not-Present Fraud in a Post-EMV Environment: Combating the Fraud Spike

This white paper is based on data collected in two separate research efforts. In the first, Aite Group surveyed fraud executives at 36 large U.S. merchants from March to May 2014 to understand points of pain and planned solutions. Aite Group also interviewed card executives from payment networks and 18 of the top 40...

Countering Cyber Threats with Behavioral Analytics

Today's flood of digital data-flowing from hundreds of millions of devices and contained in billions of online transmissions and transactions-often presents organizations with more raw information than they are able to absorb. Even more worrisome, this data deluge provides cyber criminals with a means to hide...

OFAC Compliance

Criminals and terrorists use sophisticated techniques to hide their true location, and many banks or other businesses become victims of such location spoofing - thus violating OFAC regulations that prohibit business transactions with specific countries, entities, or individuals. To be compliant with OFAC...

Combating Account Takeover

In 2011, the FFIEC issued guidance requiring financial institutions to beef up their online authentication and fraud prevention efforts. Yet today, account takeover is more rampant than ever. Professional cybercrime crews easily circumvent common anti-fraud measures to steal millions from banks and credit...

Making a Business Case for Online Fraud Detection

Most organizations that enable users to perform Web transactions (e.g. banks and ecommerce sites) have implemented security controls to address online and mobile fraud. These controls fall into two buckets: transaction-focused intelligence, which looks for anomalous actions, and device-focused intelligence, which...

Reducing SMS Authentication by a Factor of Five

Many banks are replacing traditional risk-based secret questions with out-of-band SMS authentication. Beyond the enhanced (perceived) security that comes with out-of-band authentication the major driver for adoption of these technologies is regulation (i.e. FFIEC Guidelines). However, with security and compliance...

Detecting Remote Access Attacks on Online Banking Sites

Remote Access Tools (RATs) allow an attacker to take control over a desktop and use it remotely, opening any application and operating the PC as if the fraudster was sitting next to it. Recently, RAT attacks have migrated from use in nation state and hacktivist operations to online banking fraud. Existing fraud...

Automated Fraud Prevention for FFIEC Compliance

The most recent Federal Financial Institutions Examination Council (FFIEC) supplement states that "...controls implemented in conformance with the guidance several years ago [the 2005 original guidance] have become less effective," and clarifies that "...malware can compromise some of the most robust online security...

Selecting the Right Cybercrime-Prevention Solution

Financial institutions, commercial enterprises and government organizations are all prime targets for cybercrime. Malicious software, or malware, is the primary attack tool used by cybercriminals to execute account takeover attacks, steal credentials and personal information, and initiate fraudulent...

Online Banking Fraud: Preventing Fraud by Detecting Malware

The malware industry supplies all the components cybercriminals need to easily perpetrate malware-driven financial fraud and data theft. In today's virtual world, the scope of organizations vulnerable to malware-driven cybercrime is quite broad. In addition to banks and credit unions that are subject to online banking...