Home
About Us
Contact Us
Site Map

Riding the Tsunami!

 

The wave of fraud within the payment system is relentless and pervasive. The damages are material and often devastating to unprotected victims. As payment methods explode with new choices, convenience and flexibility, existing and new attack technologies create a plethora of challenges associated with maintaining the security and integrity of the supporting processes and systems.  What are the payments system champions doing to prepare, secure, and protect?  Surfing Payment Channels – Mastering the Fraud Tsunami provides insights presented by top industry leaders who live and work on the front lines of the war on payments fraud.

 

Financial services professionals will find this book interesting and provocative.

 

Individuals and businesses at risk will be enlightened through this exposure to a glimpse of the vast arsenal and expertise of the attackers and work being done to generate and make available effective countermeasures.

 

Students and developing professionals preparing to ‘surf the payments ocean’ should consider this book a “must read”!    

Goals of the Surfing Payment Channels book series:

 

Promote - Generate awareness and understanding of concepts, ideas and opportunities the contributing leaders would like to put in front of the financial industry and general public.

 

InformExpose readers to trends, risks and opportunities associated with the changing payment system via a series of thought leadership and experience sharing provided by engaged industry leaders.

 

Educate – This book may be used as a teaching aid to offer learning and insights to students and advancing professionals preparing to face the challenges associated with payment channel risks and opportunities.   

GAIN INSIDE ACCESS to top executives who are leading the war on fraud in the payments system today! Senior executives from a diverse cross section of key industry organizations share their perspectives on the array of fraud attacks currently pummeling payment channels along with expert views on mitigation and prevention practices. Surfing Payment Channels – Mastering the Fraud Tsunami is sure to increase any reader’s awareness and understanding of the issues and impacts surrounding fraud in our rapidly evolving payment system.

 

For contributing writer and sponsoring company briefs go to the 'About Us' page.

Sponsoring/Contributing Organizations

 

FS-ISAC

FS-ISAC shares critical, authoritative information across a range of industry players instantly.

Launched in 1999, FS-ISAC was established by the financial services sector in response to the Presidential Directive 63 in 1998. That directive, later updated by Homeland Security Presidential Directive 7 in 2003, mandated that the public and private sectors share information about physical and cyber security threats and vulnerabilities to help protect the American critical infrastructure.

Constantly gathering reliable and timely information from financial services providers; commercial security firms; federal, state, and local government agencies; law enforcement; and other trusted resources, the FS-ISAC is now uniquely positioned to quickly disseminate physical and cyber threat alerts and other critical information to your organization. This information includes analysis and recommended solutions from leading industry experts. The FS-ISAC provides rapid and trusted protection for our companies, our industry, and our country. Bad news travels fast. When it comes to cyber security threats against financial services firms, that adage has never been more accurate. Now, thanks to the FS-ISAC, help is arriving just as quickly. The recent successful completion of our Critical Infrastructure Notification System (CINS) allows the FS-ISAC to speed security alerts to multiple recipients near-simultaneously while providing for user authentication and delivery confirmation. The FS-ISAC also provides an anonymous information-sharing capability across the entire financial services industry. Upon receiving a submission,

industry experts verify and analyze the threat and identify any recommended solutions before alerting FS-ISAC members. This assures that member firms receive the latest tried-and-true procedures and best practices for guarding against known and emerging security threats.

Joining the FS-ISAC is one of the best ways financial services firms can do

their part to protect our industry and its vital role in the American critical infrastructure.

To that end, FS-ISAC membership is recommended by the United

States Department of the Treasury, the Office of the Comptroller of Currency,

the Department of Homeland Security (DHS), the United States Secret Service,

and the Financial Services Sector Coordinating Council. In fact, both Treasury

and DHS rely on the FS-ISAC to disseminate critical information to the financial

services sector in times of crisis.

 

Armor Safe Technologies

Armor Safe Technologies specializes in the development, deployment, and servicing of the industry’s most innovative cash management systems. Our safes validate, count, and secure cash in cassettes ready for delivery to your bank, establishing an effective closed-loop solution for many of your toughest challenges: loss prevention, employee accountability, and financial transparency.

We customize our safes to meet your needs and create a cash management solution that cost-effectively protects your assets. As the industry leader in innovation, we are constantly developing and delivering new technologies to ensure that, together, we’ll overcome your current and future cash management challenges.

Much more than a safe, our products reduce labor costs, generate detailed reports, and provide seamless accounting from the cash register to the bank with the utmost security every step of the way. That’s the power of smart technology. We significantly improve your operational efficiency by integrating seamlessly into your business. You’ll save time and money, and your investment will

begin paying for itself on day one because fewer people will be handling your cash.

With Armor Safe Technologies working hard for your money, you can spend more time on what matters most, serving your customers, developing your people, and growing your business. These big jobs are made easier with the improved productivity, accountability, and transparency that an Armor safe will provide.

Armor Safe Technologies has established strategic partnerships with the world’s leading armored car carriers, and every Armor safe features world-renowned components like MEI’s bill validator to provide the highest level of cash security.

 

Orbograph

Orbograph is a leading provider of recognition-centric software and services

for the check processing and forms processing markets. Orbograph’s innovative

technologies are in use in over one thousand financial institutions and service

bureaus, processing billions of checks and forms annually. Through check

processing automation, fraud prevention, data mining for marketing, and forms

processing automation solutions, Orbograph enables clients to envision more for

their organization by reducing costs, managing risk, and driving revenue growth

while ensuring that achieving more is a reality.

 

The 41st Parameter

As leaders in fraud intervention, 41st Parameter’s innovative solutions help

you protect your customers and your brand, reduce fraud losses, and make

the Internet a safer place to conduct business. Through a combination of best

practices, leading technology, and human interaction, our innovative solutions

provide an unprecedented level of Internet security, decrease the anonymity of

the Internet, and help you gain valuable insight into every online transaction and

customer interaction. We make the process of preventing and detecting Internet

fraud easier and more effective, reducing both expenses and potential losses.

41st Parameter provides solutions for detecting and preventing fraud across

multiple channels for the world’s most valued and recognizable brands. Leading

financial institutions, e-commerce companies, and travel services businesses

rely on 41st Parameter’s technology to protect them from cyber crime threats

including card not present fraud, new account origination fraud, phishing and

account compromise, credit bust outs, and fraud ring attacks. Founded in 2004,

41st Parameter makes the process of detecting and preventing fraud easier and

more effective, reducing both expenses and potential losses. As a leading Web

fraud detection innovator, the company supplies industry-proven solutions that

integrate advanced device identification with comprehensive risk management

capabilities.

 

IdentaZone, Inc

IdentaZone, Inc specializes in innovative security technologies and products that utilize all forms of biometric authentication to provide enterprise-wide platform-independent solutions for infrastructure, data and communications protection. Technologies developed and implemented by the company address the pressing needs of the marketplace for integrated customizable security and identity management solutions that allow concurrent use of multiple biometric technologies and devices. Co-Founder and Vice President/CTO Michael Milgramm, currently own’s 10 patents and patent applications specifically related to biometric solutions.

Headquartered in New York, IdentaZone, Inc specializes in providing innovative and unique biometric security software and solutions. IdentaZone has been developing and offering unique complete biometric solutions to secure key enterprise and individual user data assets, content, and privacy by utilizing the latest multi-vendor advancements in biometric technologies.

IdentaZone believes that key elements of corporate security and personal, which include strong authentication (identity verification), authorization, access control, confidentiality, integrity and privacy, can be attained by deploying and effectively managing a platform independent biometric security infrastructure that emphasizes both enterprise-level and individual user features. IdentaZone also believes that strong and modular underlying technology platforms can be

translated both into horizontal and industry-specific products. Its mission has been to create future-proof technologies and products that seamlessly blend platform-independent biometric-based identity verification with existing and future security systems, while essentially being transparent to the end-users.

 

Memento

Memento, Inc. is a recognized leader in enterprise fraud management. Memento Security, the company’s award-winning solution, is an innovative platform for monitoring, detecting, and investigating fraud and inappropriate activities by a wide range of fraudsters from trusted insiders to criminal outsiders. Used by the world’s largest and most influential financial institutions, Memento solutions are business-focused, easy to use, and quick to implement. By detecting

inappropriate activities early and precisely, Memento gives enterprises the information they need to prevent loss, protect revenue, and mitigate risk.

Memento was founded in 2003 to solve two of the most critical unsolved problems faced by financial services enterprises: fighting fraud and managing compliance. From the start, Memento’s leaders recognized that the traditional ways of attempting to address these complex, dynamic issues were ineffective, inflexible, and overly complicated. They saw an opportunity waiting for the right solution.

Our team of technologists and industry veterans created Memento Security from the ground up to take a fundamentally different approach, one that drew upon proprietary indexing, advanced fraud-scenario modeling, and monitoring techniques to zero in on the telltale events and patterns that include fraud and compliance issues.

As the company expanded, we focused on applying our solution and unique approach to the wide-ranging challenges of fraud and compliance, including check fraud, employee fraud, bust-out fraud, health-care fraud, regulatory issues, and more. In each case, we provide a solution that is more accurate, flexible, faster, and better than traditional approaches. And we work closely with our customers to meet the ever-changing challenges they face.

Since its founding, the company has grown steadily and quickly, attracting a loyal base of customers, including credit unions, community banks, larger banks across North America and Europe, and health-care institutions. Though the company has grown, our focus remains the same, fighting fraud and managing compliance.

 

The Smart Card Alliance

The Smart Card Alliance is a not-for-profit, multi-industry association working to stimulate the understanding, adoption, use, and widespread application of smart card technology. Through specific projects such as education programs, market research, advocacy, industry relations, and open forums, the Alliance keeps its members connected to industry leaders and innovative thought. The Alliance is the single industry voice for smart cards, leading industry discussion

on the impact and value of smart cards in the United States and Latin America.

The Smart Card Alliance membership includes over one hundred and eighty organizations that are leading companies in the financial services, computer, telecommunications, technology, health care, retail, security, and transportation industries, as well as a number of government agencies. The Alliance brings together leading users and technologists from both the public and private sectors. Membership is open to any organization focusing resources based on the smart

card technology.

Smart Card Alliance Priorities

• Serve as an educational resource to its members and the industry on emerging smart card adoption issues

• Provide a forum for cutting-edge discussions and group projects that positively influence the implementation of smart card technology

• Engage industry to influence standards that are relevant to smart card adoption and implementation

• Maintain a voice in public policy that affects smart card adoption and implementation

Smart Card Alliance Activities

Industry and Technology Councils. To accomplish its goals, the Alliance has member-driven industry and technology councils that explore issues and define requirements in key markets or technology areas. Groups collaborate on specific deliverables, including reports, briefings,

and educational material.

Conferences. The Smart Card Alliance holds three conferences per year. These events are designed to provide information to attendees that will assist them in the development and implementation of smart card initiatives.

Professional Development and Certification. The Smart Card Alliance launched a bold initiative in 2009 to provide world-leading smart card training and educational resources for industry professionals interested in furthering their knowledge and advancing their careers. The

result was the first official certification program for smart card professionals (CSCIP) along with a personal membership program providing comprehensive educational resources and social networking services, the Leadership, Education, and Advancement Program (LEAP).

Industry Networking. The more than 1,350 mostly mid- to senior-level industry professionals participating in Smart Card Alliance activities represent engineering, marketing, business development, and sales for major supplier, integration, and issuing organizations, creating a rich

business community that fosters valuable networking opportunities.

 

Silver Tail Systems

Silver Tail Systems provides third-generation fraud prevention to protect against business logic abuse, the abuse of legitimate Web pages to perpetrate fraud. Silver Tail products use real-time behavior analysis to detect and alert on known threats and new behaviors like Man-in-the-Browser and Zeus, and then enable the fraud and security analysts to disrupt these attacks in real time. Founded by fraud prevention experts from eBay and PayPal, Silver Tail significantly

reduces online fraud losses, protects Web sites, and increases customer trust.

Hackers are no longer high school kids trying to one-up their friends or criminals trying to just break into sites. Instead, today’s sophisticated hacker is organized crime, strategically targeting Web sites, stealing billions of dollars from companies and their customers. Vendors providing Web application security and intrusion prevention have forced hackers to become much more innovative in their means of attacking Web sites. These hackers now target the legitimate

business logic of Web sites to perpetrate their fraud, including hijack threats, automated programs for password guessing, mass registration of accounts to game incentive programs, scraping customer data off the Web site to perpetrate identity theft, and many others. Silver Tail is using the deep domain expertise of its team to provide software that combats business logic abuse in real time. Silver Tail provides a new generation of fraud prevention:

• Behavioral analysis. Silver Tail provides proactive identification of new and suspicious behavior on a Web site or event. Web sites no longer have to rely on their customers to report problems. Silver Tail detects the behavior in real time and immediately sends notifications

and alerts.

• Investigation tools. Silver Tail provides easy and efficient tools for investigating exploits and suspicious behavior. No more culling through Web logs to determine how bad actors are perpetrating their fraud.

• Immediate response. Business owners can immediately change business logic flows for the bad actors without impacting good users in real time and without requiring engineering resources.

 

A team of fraud prevention experts who built anti-fraud and anti-phishing tools at eBay and PayPal founded Silver Tail. Through their experience and proprietary algorithms, they have built a system that is scalable, minimizes false positive rates, and is extremely flexible to adapt to changing attack vectors. Silver Tail’s recent work with several popular Web sites has found that as much as 50 percent of traffic can be robotic with a substantial amount of live exploits at any point in time. Most of this had been completely undetected by the sites. Silver Tail forensics took minutes to discover the exploits, saving these companies weeks of analysis. Silver Tail mitigation helps to divert and block the bad behavior in real time, saving the cost of resources to rewrite pages.

 

Tyfone, Inc

Tyfone is a neutral infrastructure enabler for cloud computing based mobile services. Tyfone enables the next wave of secure-element-neutral mobile apps that are secure enough to store your Driver’s License, Health Records, Passport, Debit, Pre-paid and Credit Cards.

Tyfone’s u4ia® platform and its companion SideTap™ card is the world’s first patented memory card-based mobile payments solution with integrated secure element, OTA controller and miniature contactless coil for mobile NFC payments. The technology operates in any standard memory card slot and is rapidly gaining market acceptance as a single-strategy approach to mobile contactless payments for any mobile phone. Tyfone and its partners enable a suite

of services including Mobile Banking, Mobile Identity Management, Mobile Remote Payments, Mobile Retail Services and Mobile Contactless Payments.

 

Guardian Analytics

Based in Los Altos, CA, Guardian Analytics helps financial institutions of all sizes protect their customers and their reputations by proactively detecting the online account takeover that leads to ACH, wire, call center and other forms of fraud. Guardian Analytics leverages its deep technical knowledge connecting data analytics, the online domain, and fraud expertise. Our FraudMAP solution takes a progressive approach to fraud prevention and uses behavioral analytics

to detect fraudulent account activity in retail and business accounts. Founded in 2005, the company is privately held with venture funding from Foundation Capital and Sutter Hill Ventures.

 

FIS

FIS is the world’s top-ranked technology provider to the banking industry. With more than Thirty-thousand experts serving 14,000 clients in one hundred countries, FIS delivers the most comprehensive range of solutions for the broadest range of financial markets, all with a singular focus of helping clients succeed. Every FIS solution has the strength you need for profitability today and the power to help you manage whatever comes next.

FIS is part of the S&P 500. FIS has also been named the number-one overall financial technology provider in the world by American Banker and Financial Insights (FinTech 100).

 

Voltage Security, Inc

Voltage Security helps organizations with sensitive customer information e.g. cardholder data to protect that information wherever it goes – databases, applications, POS devices, partners, customers and payment processors – using end-to-end encryption, tokenization and masking. Voltage solutions are rapidly gaining adoption and are already in use by 3 of the top 5 US payment processors (Heartland, Fifth Third Processing Solutions and Elavon), POS device manufacturers as well as merchants, insurance companies, telecommunication companies and other large financial services companies. Bank Technology News recently declared Voltage Security to be one of its top innovators for 2010, for its breakthrough approaches to protecting and transmitting data securely with innovative cryptography and simplified key management.

In addition to protecting cardholder data, Voltage provides solutions for protecting emails, files and other types of structured and unstructured data. In fact, some of the largest companies in the world rely on Voltage security solutions to protect data end-to-end for their compliance and security needs – internally and with customers and partners.

 

Norkom Technologies

Established in 1998, Norkom Technologies (AIM: NORK.L, IEX: NORK. IE) enables financial organisations to take intelligent action, control defences, and evolve strategies against fraud, money laundering, and other types of financial crime. By combining a unique investigative technology platform with deep domain expertise, Norkom has established a solid track record of reducing financial losses, protecting users’ reputations, improving operational efficiencies, and lowering the cost of information technology. Norkom serves clients in over 100 countries across four continents including HSBC, Banco Santander, Bank of Montreal, Credit Agricole, DnB NOR, Dubai Islamic Bank and Standard Chartered Bank.

 

Authentify, Inc

Founded in 1999, Authentify, Inc. provides automated authentication services for many of the largest online business enterprises operating today. The Authentify service enables organizations to quickly and cost-effectively perform real-time, multi-factor user authentication during an Internet session. By leveraging the familiarity of the telephone networks, Authentify delivers an effective

multi-factor authentication process that is practical for business and easy for end users.

Authentify’s patented technology employs a message-based architecture to seamlessly integrate with existing online processes developed for e-business, secure information access, or the distribution of security credentials. By synchronizing a user’s web session with an automated telephone call, Authentify makes undeniable contact with the person behind the computer while capturing transaction details for audit purposes.

Authentify provides end users with an intuitive authentication process that does not require additional software or training on the user’s behalf. With its multi-language compatibility using landline or mobile phones, Authentify’s service offers a truly portable authentication solution with worldwide reach.

 

FonWallet Transaction Solutions, Inc

FonWallet Transaction Solutions, Inc. provides m-based transaction solutions for the credit card, carrier and banking industries. Founded in 2006, the FonWallet solution is built to drive value, security and benefits to the entire transaction chain. More information about FonWallet is available at www. fonwallet.com.