Entrust TransactionGuard Zero Touch Fraud Detection Capabilities

Entrust TransactionGuard transparently monitors user behaviour to identify anomalies and calculates the risk associated with a particular transaction — all seamlessly and in real-time. Unlike competitive offerings, Entrust TransactionGuard can analyze all points of interaction with the user on the Web site with a zero-touch approach, allowing organisations to get a complete picture of potentially fraudulent behaviour without having to make significant changes to their business application.

Using customizable, pre-built fraud rules and business signatures that describe a particular transaction path, the solution includes a range of methods to help identify anomalies and asses fraud risk.

Entrust TransactionGuard Zero Touch Detection Capabilities

Device Profiling

The Entrust TransactionGuard device profiling feature tracks the attributes of machines/computers used to access the business application by obtaining and recording machine specific information and creating a unique device ID. Rules can be created to monitor potentially fraudulent scenarios associated with machines, such as whether the same user is logging in through multiple devices, or whether multiple users are logging in through the same device. Entrust TransactionGuard device profiling and matching assessment supports more than 20 different attributes providing customers with the flexibility to build powerful fraud detection rules.

IP Intelligence

Entrust TransactionGuard enables organisations to leverage various sources of IP intelligence to detect potential fraud activity including IP-Geolocation data to determine the geographic location of a particular user or whether anonymous proxies are been used to access the business application. With Entrust TransactionGuard, organisations also have the option to incorporate Host Reputation monitoring which provides an assessment of the reputation of a given IP based on a real-time data feed. Reputations are computed based on over 130,000 submission sources on the Internet and encompasses more than seven million IPs at a given time.

Blacklists and Whitelists

Entrust TransactionGuard has full monitoring capabilities for both black and white lists to help assess the risk level during a particular user session. Matches for blacklist items (typically bad or suspicious) can be used to increase the risk score to a session.  Matches for whitelist items (typically good or exceptions) can be used to ignore events or reduce the risk in a session. These lists can also be used in combination as part of a rule set. 

Transaction Analysis

Entrust TransactionGuard allows organisations to build and define transaction signatures and fraud rules to track user activity in real-time.  A transaction signature identifies a particular function that is to be tracked – for example, “transfer funds” or “pay a bill”.  A fraud rule is a formula that examines user activity within a particular signature and evaluates risk to detect potentially fraudulent activity. Rules are used to represent industry-characteristic patterns of fraudulent behaviour; they consist of sets of conditions and parameters to detect actual and anticipated criminal attacks, and are derived from real-world experience. Entrust TransactionGuard monitors user activity in real time and calculates risk scores that are used to generate alerts and provide risk data to applications so that specific actions can be taken such as stepping up authentication or blocking a transaction to mitigate fraud threat. 

Entrust TransactionGuard provides the most intuitive rules configuration toolset in the industry and as new fraud patterns are identified, fraud rules can be immediately updated through an easy to use management interface. Entrust TransactionGuard also includes a rich library of fraud rule templates and a comprehensive set of out-of-the-box rules enabling organisations to rapidly deploy the most current fraud detection formulas.

Behavioral Analysis

Behaviour profiling and analysis is the ability to build up user profile over time to better understand anomalies and potential fraudulent behaviour. Entrust TransactionGuard will compare a user’s current real-time activity to their activity history to determine if it is unusual behaviour for that user.  For example, a user logs on from an unusual city or country or, a user transfers an unusually large amount to an unusual or new external account.  The availability of a behaviour profile for each and every user allows an organisation to flag abnormal user behaviour helping to detect potential fraud.  Entrust TransactionGuard rules definition application enables fraud analysts to easily create and update rules related to behavioural activity.

Multi-User, Multi-Session Pattern Detection

While analysing discrete transactions is important to detect potential fraud, criminals will often conduct a series of seemly “normal” transactions over time in an attempt to “fly under the radar” of a fraud detection system. For example, a user unknowingly has his credentials compromised and the criminal conducts a bank transaction to transfer $3000 to an external bank account. This type of transaction would likely be considered normal and low risk and therefore, there would be no need to step up the authentication or block the transaction. But, if several users are conducting similar fund transfers, all to the same external account, this pattern of transaction activity should be flagged as potential fraud. Entrust TransactionGuard’s advanced multi-user, multi-session monitoring capabilities allows organisations to build rules that will look at transaction activity occurring throughout the banking application system and generate alerts on suspicious fraud patterns.

Forensics and Look Up

Entrust TransactionGuard enables organisations to capture all relevant data for fraud analysis on current and past transactions, and maintain it onsite for analysis at all times. Entrust TransactionGuard helps to automate e-fraud investigation processes by providing real-time forensic capabilities including a fraud alert dashboard, drill down analytics capabilities and a build in case management system to allow organisations to investigate, assign, annotate and update status flags for alerts. Forensics and data analysis can also be applied to historical data using a set of prebuilt reports or by designing custom queries.

Entrust TransactionGuard Components 

Entrust TransactionGuard consists of two components, a real-time fraud detection product and a unique fraud analytics product.  These components, in combination with Entrust’s Open Fraud Intelligence Network (OFIN), offer organisations a powerful tool to detect and defend against fraudulent activities.

·          Real-time Fraud Detection is a zero touch monitoring tool that looks for fraudulent behaviour and access patterns and delivers real-time information and reports for analysts.

·          Entrust TransactionGuard FraudMart is a unique fraud database technology populated with online session traffic that is searchable as online activity occurs, enabling a revolutionary analytics-based methodology for detecting and preempting fraud in real-time.

·          Entrust Open Fraud Intelligence Network (OFIN) is a collaborative network that consolidates information from a variety of sources, including fraud patterns that have been experienced in the market today.

Real Time Fraud Detection – Zero Touch Monitoring Tool

Entrust TransactionGuard real time fraud detection transparently monitors user behaviour to identify anomalies and then calculates the risk associated with a particular transaction, all seamlessly and in real time. Using customizable, pre-built fraud rules and transaction signatures, the solution can help identify anomalies such as: a user login from an unknown machine or from a risky IP address or location; a transfer of unusually large amounts to unknown accounts; or a change of personal information. The analysis is done transparently, is instantaneous and does not require the application to be changed in any way or cause extra burden on the user.

Entrust TransactionGuard is designed to be able to adapt and detect fraud techniques as they change. Unlike solutions that force organisations to modify their applications, Entrust TransactionGuard can examine and identify new types of fraud based on data collected from relevant transactions. This enables organisations to more quickly adapt to new types of fraud as they emerge. Additional capabilities such as "signatures" of suspicious transaction patterns may also be added in real time to help address an organisation’s needs, thereby reducing both fraud and administrative costs.

Entrust TransactionGuard FraudMart

Entrust TransactionGuard FraudMart enables organisations to identify broader fraud patterns as quickly as the first fraud pattern is discovered. This is a dramatic advancement over current online fraud analytics, which require scrubbing and extracting of historical session logs into expensive data warehouses for after-the-fact reporting. Entrust TransactionGuard FraudMart not only provides rapid intelligence to pre-empt further fraud, but also enables organisations to block related transactions that may already have been completed online but have not yet completed.

Entrust TransactionGuard FraudMart offers the following benefits to customers:

·          Automate e-fraud investigation process by providing real-time forensic capabilities. For the first time, it is possible to research and block identified patterns within minutes of an attack

·          Analytics on fraudulent behaviour patterns

·          Real-time analysis of all online access patterns, including information based on geo-location

·          Real-time analysis of all online behaviour patterns

·          Customizable pre-defined fraud reports, as well including “in-session” account hijackings, bot attacks and phishing attacks as ad hoc query capability using any SQL reporting tool

Entrust Open Fraud Intelligence Network (OFIN)

A key component of Entrust’s risk based authentication architecture is the Entrust Open Fraud Intelligence Network (OFIN).  The Entrust Open Fraud Intelligence Network represents a powerful tool to detect and defend against fraudulent activities.  The Network consists of consolidating information from a variety of sources, including fraud patterns that have been experienced by leading global financial services organisations. The combination of fraud data and the ability to share fraud experiences is a significant advancement in the way fraud can be detected and addressed.

OFIN’s cumulative knowledge base enables organisations to rapidly react and address new fraud threats based on the network’s shared knowledge.  Unlike competing closed networks, Entrust does not require participants to deploy proprietary software to participate, though Entrust TransactionGuard customers will be able to take full advantage of a streamlined implementation process for rules.

OFIN works seamlessly with Entrust’s risk based authentication solution comprised of Entrust IdentityGuard and Entrust TransactionGuard, and provides a comprehensive complete solution from an experienced single service provider.

Entrust TransactionGuard Business Benefits

The Entrust solution offers the following business benefits:

·          Entrust TransactionGuard real time fraud detection monitors and detects fraud with no impact to existing applications

·          Entrust TransactionGuard FraudMart delivers rich forensic and reporting based on all transactions, not just a subset

·          Provides seamless integration with the Entrust Open Fraud Intelligence Network

·          Enables organisations to comply with industry and governmental consumer protection regulations

·          Provides a low cost solution that can be rapidly deployed to all users

·          Seamlessly operates with the Entrust IdentityGuard versatile authentication platform for risk based authentication