Kaspersky Enterprise Cybersecurity

Kaspersky
Fraud Prevention
Cloud

Proactive Account-based Fraud
Protection for Web and Mobile
Channels
The Expanding Attack Surface and theNeed for an Account-Centric & Multi-Channel Fraud Prevention
Approach

Customer devices you don’t control sit
beyond your security perimeter and are likely
under- or even un-protected. Regardless,they are routinely granted access to yoursensitive digital banking applications andallowed to perform a variety of high risk
activities. As most customers use multiple
channels to access your banking
applications, it becomes challenging tohave ultimate confidence that yourfinancial institution has adequately
established protection strategies for them all.

Additionally, fraudsters often attack one channel in order to facilitate crosschannel fraud (for example: attacking relatively unsecured mobile banking
credentials to log into online banking applications to commit account takeover).
This leads to the inevitable conclusion that there is a need to protect the accountholistically, not just the device or individual channel. This strategy requires anaccount-centric & multi-channel approach.
Kaspersky Fraud Prevention Cloud is capable of detecting attacks that target
either user accounts or banking sessions, such as:

•••••
•

Account Takeover
New Account Fraud
Phishing / Pharming
Bots / card testing / credential cross-checking
Attacks with Remote Administration Tools
Man-in-the-Browser attacks

Kaspersky Fraud Prevention Cloud analyses the combination of parametersand events from all user devices used to access accounts.
Makes decisions based on the overall reputation of devices and accounts over time.
Allows for the efficient detection of complex fraud attacks at account level as wellas helping to constantly improve detection accuracy.

Kaspersky FraudPrevention Cloud
Mobile Channel

Online Channel

Kaspersky Fraud Prevention Cloud combines 4 key fraud prevention technologies
based on Machine Learning algorithms:• Clientless Malware Detection checks if the customer’s machine is infected withmalware without additional software on the user's side. This data is used for risk
based authentication and machine learning modeling, and to determine thelegitimacy of transactions.
• Behavioural Biometrics analyses unique customer’s interaction with device, suchas mouse movements, clicks, touches, swipe speed and more to detect whether adevice is being used by a legitimate user or not. This technology detects bots andremote administration tools.
• Behavioural Analysis analyses what the user clicks, how he acts during thesession and login. Also looks at the typical navigation and time patterns andother aspects. This allows a profile of normal behaviour to be built and any
abnormal or suspicious activity.
• Device and Environment Analysis leverages the global presence of Kaspersky
Lab to identify “good” devices and use this knowledge for user authentication.
Based on global device ID, IP-address, location reputation and more, any attributemarked as involved in fraudulent activity is also proactively detected and shown
as suspicious or related to fraud.

Machine Learning methods, being the core part of the system, enhance the key
technologies activating additional components of fraud detection:
Risk Based Authentication (RBA) makes it possible to dynamically assess the risk
level when a user logs in to the system. Based on this assessment and real-time
verdicts from Kaspersky Fraud Prevention Cloud, your organisation can makea decision on how the transaction should be processed further: allow access,request additional authentication or restrict available services. This brings fraud
detection to a new level, providing real-time responses and avoiding additional
authentication steps for legitimate customers .
Continuous Session Anomaly Detection provides continuous assessment of thesession risk, based on the analysis of behaviour, device and environment, biometricdata and more. This significantly empowers internal transaction monitoring
systems, providing the means of early detection and automation, and increasingdetection rate. Risky transactions can be made the subject of high attention andmanual processing while legitimate ones can be processed automatically without
any delays.
Kaspersky Fraud Prevention Cloud does not replace your internal monitoring solution.
Instead, it complements it by constantly providing your teams with data, necessary
for real-time detection of fraudulent activity before a transaction occurs. Thisempowers your current systems to benefit from additional and proactive context
for quicker and more accurate decision-making, as well as for intelligent andadaptable use of step-up authentication.

Contact us to learn more: kfp@kaspersky.com

ExpertAnalysis

All about Internet security: www.securelist.com
Find a partner near you: www.kaspersky.com/buyoffline

HuMachine™

www.kaspersky.com#truecybersecurity
MachineLearning

Big Data /Threat Intelligence© 2017 AO Kaspersky Lab. All rights reserved. Registered trademarks and service marks are the property of theirrespective owners.