Customers: Sviaz-Bank Moscow; Financial services, investments and audit Contractors: Jet Infosystems Product: Oracle Adaptive Access ManagerProject date: 2016/03 - 2016/08
|
On October 31, 2016 the Jet Infosystems company announced implementation of means of protecting of RBS services of the Sviaz-Bank.
Project Tasks
It is important for us that at increase in security of channels of remote service the client did not experience any significant restrictions. We are customer-oriented and should provide the most comfortable service at the high level of protection against fraud. In a project deliverable we achieved it. – The antifraud system based on Oracle Adaptive Access Manager analyzes all key events in the RBS system and the fraud real-time analysis issues results. It allows us to react quickly to attempts of unauthorized actions, minimizing risks of financial losses for our clients. We also had an opportunity to quickly reveal vulnerabilities of a system of Internet banking, and, therefore, to increase its security. For bank it is an essential factor of strengthening of a goodwill and increase in attractiveness of services for consumers. |
Project Progress
Together with experts of bank specialists of Jet Infosystems company analyzed the operating processes of remote banking and defined necessary points of control. The development team a solution antifraud defined requirements to information exchange between OAAM and the RBS system and developed the integration module.
Project Results
Experts of the contractor developed analysis algorithms of parameters of payment and not payment transactions in the RBS system taking into account features of the Sviaz-Bank. The monitoring system of RBS works at a basis of the fixed rules and carries out profiling of clients, control of chains of events and many other things. The antifraud system transmits the received results to the RBS system, defining the mode of further processing of payment transaction.
We worked in close contact with business divisions and department of security of bank. On the basis of best practices of Oracle and our work experience in the banking sector the basic model of the analysis of events in RBS channels – processing rules of events and threshold values of scoring points was developed, and employees of the customer helped us to specify it and to adapt to features of business processes of the Sviaz-Bank. Active cooperation allowed to provide high efficiency of the implemented system and the minimum quantity of false operations from the first day of operation. Alexey Sizov, the head on fight against fraud of Information Security Center of Jet Infosystems company |
For ensuring correctness of work of CM of RBS mechanisms of regular updating of the reference books containing the information about clients, structure of bank, etc. are provided. The history of actions in an antifraud system is stored within three years – it allows to analyze statistics and if necessary to adjust processing rules of events and criteria of reference of transactions to fraudulent.
The problem of data security provision and services of clients always was and remains priority for Oracle. And we are glad to congratulate the Sviaz-Bank on the solution of the major task. Thanks to close interaction in this project the functionality of identification of fraudulent activity and adaptive access control without entering of serious changes into the system of Internet banking was implemented. This innovation approach allowed to reduce considerably project deadlines, especially when ensuring protection of several systems and channels of access, and we are sure of expansion of this positive experience in Russia. |