Find White Papers
Home
About Us
List Your Papers
    
> ThreatMetrix. > Block online fraudsters and identity thieves-by letting their own PCs snitch on them

Block online fraudsters and identity thieves-by letting their own PCs snitch on them

White Paper Published By: ThreatMetrix.

This white paper highlights a surprising new approach to fraud prevention: remotely recognizing a fraudster’s PC (or other device). Even with identity (password/credit card) theft, the device stays the same!



Tags : 
threatmetrix, online fraudsters, identity thieves, fraud prevention, device intelligence, security, anti spam, anti spyware

ThreatMetrix.
Published:  Jan 30, 2009
Type:  White Paper
Length:  17 pages






Device Intelligence
Identity | Risk | Reputation




Device Identification Technology Whitepaper
Alisdair Faulkner
VP Products



Device Intelligence
Table of Contents
Online Identity Verification - is it a customer or fraudster? .................................................. 3
Device Identification and Fraud Prevention ............................................................................ 3
Device Identification Requirements ......................................................................................... 4
Device Identification and Fraud Prevention ............................................................................ 4
Device Identification Trade-Offs .............................................................................................. 5
Device Identification Approaches ............................................................................................ 6
Device Tagging as a Device Identification Strategy ............................................................... 6 Advantages of Device Tagging ........................................................................................... 6
Disadvantages of Device Tagging ...................................................................................... 6
Device Fingerprint Hashing as a Device Identification Strategy ........................................... 7 Advantages of Device Fingerprint Hashing ......................................................................... 7
Disadvantages of Device Fingerprint Hashing .................................................................... 7
Introducing ThreatMetrix Adaptive Device Identification ....................................................... 8 A Robust and Comprehensive Approach ............................................................................ 8
Advantages of Adaptive Device Identification ..................................................................... 9
Conclusion .............................................................................................................................. 10
ThreatMetrix Device Intelligence FAQ ................................................................................... 11
2 of 17 Device Intelligence
Online Identity Verification - is it a customer or fraudster? In any online transaction, businesses must confront a significant and growing challenge: how to verify a customer's identity in real-time without diminishing the customer's online experience within these constraints:
. Rampant identity theft and data breaches make user credentials and credit card information unreliable
. You cannot trust the device's network identity or IP Address due to the pervasive use of compromised devices and anonymizing proxies to hide a fraudster's true identity
. Alternative authentication techniques such as challenge and response questions, hardware tokens and phone verification are too costly, require a change to the customer's behavior or assume you have a prior relationship with a customer
In this paper we discuss the advantages of device identification for fraud prevention, common device identification technologies and the advantages provided by ThreatMetrix through a unique approach called Adaptive Device Identification.
Device Identification and Fraud Prevention Device identification is an effective identity verification method rapidly gaining broad adoption with online merchants, banking and financial institutions, and social networks. Device identification enables you to recognize a fraudster's device even when they change their identity through the use of proxies and stolen credit card or account password information. Typically four main strategies are used to apply device ID's to combat fraud:
. Device velocity. When fraudsters find a hole in your defenses, they move quickly to extract the maximum value. Creating velocity filters based on a device ID will enable you to minimize fraud costs even when names, credit card details and IP addresses are changed.
. Transaction linking. A device ID is a powerful tool for finding related transactions, eit... [download for more]

Browse Technology Topics

Data Center

Virtualization, Cloud Computing, Infrastructure, Design and Facilities, Power and Cooling, Green Computing  
    

Data Management

Application Integration, Analytical Applications, Business Intelligence, Configuration Management, Database Development, Data Integration, Data Mining, Data Protection, Data Quality, Data Replication, Database Security, EDI, SOAP, Service Oriented Architecture, Web Service Management, Data Warehousing  
    

Enterprise Applications

Application Integration, Application Performance Management, Best Practices, Business Activity Monitoring, Business Analytics, Business Integration, Business Intelligence, Business Management, Business Metrics, Business Process Automation, Business Process Management, Call Center Management, Call Center Software, Change Management, Corporate Governance, Customer Interaction Service, Customer Relationship Management, Customer Satisfaction, Customer Service, EBusiness, Enterprise Resource Planning, Enterprise Software, EProcurement, Extranets, Groupware Workflow, HIPAA Compliance, IP Faxing, IT Spending, Marketing Automation, Performance Testing, Product Lifecycle Management, Project Management, Return On Investment, Risk Management, Sales & Marketing Software, Sales Automation, Server Virtualization, Simulation Software, Supply Chain Management, System Management Software, Total Cost of Ownership, Video Conferencing, Voice Recognition, Voice Over IP, Workforce Management, Incentive Compensation, Spend Management, Manufacturing Execution Systems, International Computing  

Human Resource Technology

Human Resources Services, Payroll Software, Time and Attendance Software, Workforce Management Software, Financial Management, Employee Monitoring Software, Employee Training Software, Recruiting Software/Services, Employee Performance Management, ELearning, Benefits Management, Expense Management  
    

IT Career Advancement

Cisco Certification, Microsoft Certification, Linux Certification, Network Security Certification, Software Development Certification  

IT Management

Employee Performance, ITIL, Productivity, Project Management, Software Compliance, Sarbanes Oxley Compliance, Service Management, Desktop Management  
    

Knowledge Management

Collaboration, Collaborative Commerce, Contact Management, Content Delivery, Content Integration, Content Management System, Corporate Portals, Customer Experience Management, Document Management, Information Management, Intranets, Messaging, Records Management, Search And Retrieval, Search Engines, Secure Content Management, SLA  

Networking

Active Directory, Bandwidth Management, Convergence, Distributed Computing, Ethernet Networking, Fibre Channel, Gigabit Networking, Governance, Grid Computing, Infrastructure, Internetworking Hardware, Interoperability, IP Networks, IP Telephony, Local Area Networking, Load Balancing, Migration, Monitoring, Network Architecture, Network Management, Network Performance, Network Performance Management, Network Provisioning, Network Security, OLAP, Optical Networking, Quality Of Service, Remote Access, Remote Network Management, Server Hardware, Servers, Small Business Networks, TCP/IP Protocol, Test And Measurement, Traffic Management, Tunneling, Utility Computing, VPN, Wide Area Networks, Green Computing, Cloud Computing, Power and Cooling, Data Center Design and Management, Colocation and Web Hosting  
    

Platforms

AS/400, Domino, Linux, Microsoft Exchange, Oracle, PeopleSoft, SAP, Siebel, Solaris, Tivoli, Unix, Web Sphere, Windows, Windows Server  

Security

Access Control, Anti Spam, Anti Spyware, Anti Virus, Application Security, Auditing, Authentication, Biometrics, Business Continuity, Compliance, DDoS, Disaster Recovery, Email Security, Encryption, Firewalls, Hacker Detection, High Availability, Identity Management, Internet Security, Intrusion Detection, Intrusion Prevention, IPSec, Network Security Appliance, Password Management, Patch Management, Phishing, PKI, Policy Based Management, Security Management, Security Policies, Single Sign On, SSL, Secure Instant Messaging, Web Service Security, PCI Compliance, Vulnerability Management  
    

Software Development

.NET, C++, Database Development, Java, Middleware, Open Source, Software Outsourcing, Quality Assurance, Scripting, SOAP, Software Testing, Visual Basic, Web Development, Web Services, Web Service Security, XML  

Storage

Backup And Recovery, Blade Servers, Clustering, IP Storage, ISCSI, Network Attached Storage, RAID, Storage Area Networks, Storage Management, Storage Virtualization, Email Archiving, Data Deduplication  
    

Wireless

802.11, Bluetooth, CDMA, GPS, Mobile Computing, Mobile Data Systems, Mobile Workers, PDA, RFID, Smart Phones, WiFi, Wireless Application Software, Wireless Communications, Wireless Hardware, Wireless Infrastructure, Wireless Messaging, Wireless Phones, Wireless Security, Wireless Service Providers, WLAN  
Search