News

IBM Unveils New Solution to Eliminate Insider Attacks

IBM has unveiled a new fraud detection capability that monitors users' online transactions for questionable activity. The new solution goes beyond today's traditional identity verification procedures by analyzing users' online behavior to help determine whether the actual use of the data is valid. This analysis can be done historically, tracking users' past activity, or prospectively by comparing realtime behavior to normal patterns of activity.

The IBM Identity Risk and Identification Solution is designed to extend an organization's online security measures beyond existing user verification processes to include session-based behavioral analysis. The solution combines the power of advanced analytics and visual data mining to assess deviations in behavior throughout a session by comparing access patterns exhibited by the user against prior sessions and against peer groups of similar users.

The solution can be used to analyze sessions either historically or prospectively. A historical analysis can help organizations identify potential misuse by "trusted" individuals for follow-on investigation and action. Data presentation is provided through interactive data visualization and a number of succinct reports, making it easy to identify patterns, relationships and suspect access. Historical analyses also result in the establishment of profiles that characterize normal or acceptable session behavior for a peer group of similar users.

A prospective analysis uses these profiles, as well as past patterns of that particular user, during an actual session to catch potential misuse before it occurs. Based on the business rules in place, access to a requested application or data resource can be immediately denied or other defined actions taken.

The new solution, a component of IBM's Identity Management Services, is pre-configured to integrate with Tivoli Identity Manager and Tivoli Access Manager, members of IBM's security software portfolio for IT services management. Tivoli Identity Manager and Tivoli Access Manager help companies manage username/password accounts, control who has access to which application, manage privacy preferences, and also gather and monitor user access data for compliance purposes. The integration of real time identity and access information prompts investigation of insider attacks, fraud monitoring and a proactive behavior-based analysis that protects IT services.


print	save	email	comment