RSS
Логотип
Баннер в шапке 1
Баннер в шапке 2
Project

FG "BKS" implemented TEConts of payments and events of information security

Customers: BrokerCreditService (BKS)

Contractors: Informzashita
Product: HPE ArcSight Management Center
На базе: HPE ArcSight ESM (Security Information and Event Management, SIEM)

Project date: 2014/04  - 2014/07

On July 17, 2014 the Informzashita company announced system implementation of monitoring of payments and events of cybersecurity on the ArcSight HP platform in an IT environment of the BKS financial group.

Project Progress

The HP solution of ArcSight became the platform for creation of an automated system. The choice of financial group for benefit of HP ArcSight is caused by broad functionality and high cost efficiency of the platform.

Within the project experts of Informzashita implemented logic of identification of signs of fraudulent activity by the analysis of the factors testimonial of a deviation of payments from a behavioral model of the client using statistical and logical rules. For this purpose together with Department of information security of FG BKS on the basis of the revealed deviations defined mechanisms of assessment of final risk of activity of the client in real time.

When monitoring fraudulent transactions are considered, both data of the payment order, and a behavioral model of the client, comparison of signs of the revealed activity to a payment profile of the client in the system of remote banking is carried out.

Project Features:

  • need of minimization of load of personnel due to decrease in number of false operations,
  • automatic formation of individual profiles of clients for identification of payment transactions, non-standard for them;
  • wide use of a mathematical apparatus of probability theory and mathematical statistics.

Project Results

Based on implementation the department of information security of FG BKS had an opportunity to create reports for conducting investigations, to make the versatile analysis of activity of clients and to estimate efficiency of a system in general. The implemented system assumes further development and allows to increase functionality on identification of fraud in the field of banking and broker services and also events and incidents of information security.