Financial Services

Financial Services

Banking and Insurance

Insider Threats

Detect inside users taking advantage of credentials in corporate enterprise applications to perform malicious operations

  • Careless employees misusing internal business assets
  • Internal fraud / embezzlement in custom-built applications
  • An insider agent stealing information on behalf of outsiders
  • Disgruntled employee altering data or acting maliciously
  • 3rd party anomalies through APIs

Impersonation

Find imposters on customer portals, bypassing MFA with stolen credentials, and attackers targeting application admins

  • SaaS applications: attackers impersonating an employee or privileged user
  • Home grown customer-facing portals: attackers impersonating a customer or partner
  • Cloud platforms: attackers impersonating administrators

Abuse and Misuse

  • Intentional embezzlement by an employee
  • An employee pretending to be a customer to steal funds
  • Teller embezzlement via cash payments
  • Human error
  • Segregation of duties in legacy systems
  • Superusers enabling unintended fraud by sharing credentials

THE VAULT

Think of a bank with many rooms, including a vault room with precious articles, cash, gold, jewelry, documents, etc… The bank has a main entrance, and the vault also has its own door, which people go through to deposit or withdraw their precious goods.
People walk through the front door, entering and leaving the bank. They may walk in and out of the vault and perform various activities in that room itself.
Just monitoring the vault’s door and actions doesn’t provide enough information for accurate detection of misuse and theft in the vault, as most of the people involved are performing legitimate actions there.

Analyzing the path people take from the moment they enter through the front door of the bank, as they pass throughout the hallways and rooms - to, in and from the vault - enables us to learn which journeys are normal and expected. These normal journeys provide RevealSecurity’s base for application detection.