防止抵押贷款行业的电汇欺诈：Snapdocs 案例研究
技术
- 应用基础设施与中间件 - 事件驱动型应用
适用行业
- 电网
- 国家安全与国防
用例
- 篡改检测
- 交通监控
关于客户
Snapdocs 是一家为抵押贷款行业提供贷款关闭自动化应用程序的公司。他们的应用程序为参与房地产交易的各方提供了一个工作流程，包括买家、贷方、产权和托管代表以及公证人。该公司的主要目标是提高抵押贷款结清流程的效率和安全性。然而，由于涉及方众多且交易的敏感性，Snapdocs 面临着重大的安全挑战，特别是在防止账户接管和电汇欺诈方面。该公司需要一种能够实时了解潜在威胁并能够快速采取行动来防止欺诈活动的解决方案。
挑战
Snapdocs 是一家为抵押贷款行业提供贷款结账自动化应用程序的公司，在增强安全状况方面面临着重大挑战。他们的应用程序为买家、贷方、所有权和托管代表以及公证人提供了工作流程，需要实时可见性以防止帐户被接管。抵押贷款行业涉及房地产交易的各方众多，因此存在多种威胁。例如，公证人经常在其电子邮件帐户上使用弱密码，有时在各个网站上共享相同的登录凭据。这使得该行业成为电汇欺诈的主要目标，攻击者执行网络钓鱼活动来接管账户并将资金重定向到欺诈性第三方账户。 Snapdocs 需要一种能够识别恶意请求和其他攻击事件模式的解决方案，以防止帐户被接管。他们还寻求更快地了解攻击者的网络请求，以触发警报并阻止它们。
解决方案
为了解决安全挑战，Snapdocs 在 48 小时内安装了 Signal Sciences NGINX 模块并在生产中启用了阻止模式。这不仅有助于阻止潜在的攻击，而且还通过电源规则提供了显着的可见性。 Snapdocs 使用 Signal Sciences Power Rules 来阻止源自非美国 IP 地址的特定流量，因为此类请求在其用户群中并不常见。他们还发现与 Opera 网络浏览器相关的欺诈行为发生率很高，其中包括匿名网络流量的 VPN。因此，Snapdocs 通过评估 HTTP 请求中的代理标头，标记并阻止了一些使用 Opera Web 浏览器的用户组。此外，借助 Signal Sciences，Snapdocs 的安全人员可以利用表面事件发生时的相关警报来更快地调查安全威胁。事实证明，Signal Sciences 与 Slack 的集成对于实时监控、标记和阻止流量非常有用。
运营影响
数量效益
Case Study missing?
Start adding your own!
Register with your work email and create a new case study profile for your business.
相关案例.
Case Study
Hydro One Leads the Way In Smart Meter Development
In 2010, Ontario’s energy board mandated that time-of-use (TOU) pricing for consumers be available for all consumers on a regulated price plan. To meet this requirement, Hydro One needed to quickly deploy a smart meter and intelligent communications network solution to meet the provincial government’s requirement at a low cost. The network needed to cover Hydro One’s expansive service territory, which has a land mass twice the size of Texas, and its customers live in a mix of urban, rural, and remote areas, some places only accessible by air, rail, boat or snowmobile. Most importantly, the network needed to enable future enterprise-wide business efficiencies, modernization of distribution infrastructure and enhanced customer service. To meet these needs, Hydro One conceptualized an end-to-end solution leveraging open standards and Internet Protocols (IP) at all communication levels. The utility drew upon industry leaders like Trilliant to realize this vision.
Case Study
Selling more with Whirlpool
Whirlpool wanted to add connectivity to appliances and transform the company's relationship with customers. Traditionally, Whirlpool interaction with customers was limited to purchases made once every ten years. Connected washer and dryers provide exciting new features like remote management of start times and inter-machine communication.
Case Study
SAS® Analytics for IoT: Smart Grid
Companies face falling revenues, rising infrastructure costs, and increasing risk of outages caused by inconsistent energy production from renewable sources. Less money is coming in as more people and organizations take steps to curb their energy use. Utilities are paying more to maintain and build infrastructure due to increasing complexity, resulting from the rising number of intermittent and variable renewable energy sources connected in the distribution grid.
Case Study
Enel Secures Italian Power Generation Network
Electric energy operators around the world are working to increase the reliability and cyber resiliency of their systems. This includes Enel, a global power company that manages and monitors the Italian power grid. This grid:• Serves 31 million customers• Has a net installed energy capacity exceeding 31 gigawatts• Includes more than 500 power generation plants,including hydroelectric, thermoelectric, and wind• Is managed and monitored by Enel 24/7/365• Is operated by Terna, the Italian Transmission System Operator (TSO)Enel is responsible for the availability of the grid’s underlying ICS and industrial network. It also manages Regional Control Centers and Interconnection Centers which connect with the TSO. The TSO manages the flow of energy to the grid plus controls and remotely regulates the power generation of power plants, increasing and decreasing power production as required. The complex system of interaction and cooperation between Enel and the TSO has strong security implications as well as operational and business challenges.
Case Study
IoT based Energy Quality Availability Monitoring Solution
There were several challenges faced:Since this data would be in the public domain, accuracy and authenticity of this data were of paramount importance. It should be able to withstand scrutiny.It is challenging to build an appliance that can withstand a wide range of voltage fluctuations from as low at 90v to as high as 320v. Since the device would be installed in remote locations, its resilience was of paramount importance.The device would have to deal with poor network coverage and have the ability to store and re-transmit data if networks were not available, which is often the case in rural India. The device could store up to 30 days of data.The platform that deals with the data should be readily available and highly reliable and never lose a packet of data.
Case Study
Data Capture for Afghanistan Forces
Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.
