RSA positioned in Gartner's Leaders Quadrant for Web fraud detection

Issued by Global Research Partners for SecureData
Johannesburg, 26 Feb 2009

SecureData Security, part of JSE-listed SecureData Holdings and a sub-Saharan distributor for RSA, the Security division of EMC, today announced that the latter has been positioned within the Leaders quadrant in the February 2009 Gartner report by Avivah Litan, entitled: 'Magic Quadrant for Web Fraud Detection'.

According to Gartner, this positioning is based on RSA's completeness of vision and ability to execute, and in relation to the RSA Identity Verification and Protection Suite.

Gartner defines the Web fraud detection market as "composed of vendors that provide software products or services that help an organisation detect and prevent fraud that occurs over the Web by:

* Running background server-based processes, transparent to users that verify user identities based on where they are or what device they are using, and/or examine which types of information retrievals, navigations and transactions they are executing.
* Comparing this information with a profile of what is expected of the user or against more generic rules as to what constitutes 'normal' behaviour.
* Stopping the transaction if actual behaviour is too out of range with what's expected and taking the appropriate follow-up action. This can range from asking users to re-authenticate themselves - often using another factor, such as a cellphone, or as is more commonly done, by answering one or more private questions that only the legitimate user can presumably answer correctly. The action taken - whether it's simply user authentication or transaction verification - should depend on how out of range a user's behaviour is with the established norm."

"We believe that our placement within the Web Fraud Detection Leaders quadrant reflects our success in protecting against the continuous advancements in online fraud and identity impersonation, as well as our ability to deliver value to our customers that reduces related losses," commented Tom Corn, Vice-President of Product Marketing at RSA. "In my opinion, this report also validates the fact that RSA's knowledgeable team is well-positioned worldwide to continue to deliver innovative solutions that protect organisations across multiple industries, and currently secure more than 225 million people's identities, credentials, and assets."

RSA Identity Protection, Verification Suite

The RSA Identity Protection and Verification Suite offers one of the most complete and innovative portfolios of strong authentication and anti-fraud technologies, and is engineered to protect organisations and their online users against the latest external threats. It is a complete software as a service (SaaS) portfolio that is designed to increase activity in online and remote transactions, inspire user confidence, and reduce fraud losses and related costs. The RSA Identity Protection and Verification Suite leverages RSA's expertise in fraud analysis, fraud forensics, and fraud modelling, and it includes the following components:

* RSA Adaptive Authentication, a risk-based authentication and fraud detection platform used by more than 8 000 organisations in 10 countries, authenticating over 225 million users through risk indicators powered by the RSA Risk Engine, such as device identification, geo-location, behavioural profiling, and RSA eFraudNetwork(SM) matching.
* RSA FraudAction(SM), a 24x7 service that protects more than 300 organisations against phishing, Trojan, and other online attacks. It is powered by the RSA Anti-Fraud Command Centre (AFCC) and its team of fraud analysts who have shut down over 125 000 illegal Web sites in 140 countries to date, reducing the lifetime of phishing attacks from approximately 115 hours to five hours.
* RSA Identity Verification, a knowledge-based authentication system that assures and confirms user identities in real-time by presenting a series of top-of-mind questions utilising relevant facts obtained from dozens of public and commercial record databases It is used by more than 140 organisations in the financial, telecommunications, insurance, and healthcare industries.
* RSA Transaction Monitoring, an online fraud detection and management system that detects, flags, and investigates high-risk activities. Its RSA Risk Engine evaluates each online activity in real-time and generates a unique risk score that reduces fraud.
* RSA Adaptive Authentication for eCommerce, a secure framework for cardholder protection and fraud management. It has authenticated over 20 billion transactions via a range of authentication and card security products, including Verified by Visa, MasterCard SecureCode and JCB J/Secure.
* The RSA eFraudNetwork(SM) cross-institution, cross-platform, online fraud network community, dedicated to sharing and disseminating information on fraudulent activity.

For further information, please contact Mark Linnell at tel. +27 11 790 2500; fax +27 11 790 2599; e-mail markl@securedata.co.za

RSA

RSA, the Security Division of EMC, is the premier provider of security solutions for business acceleration, helping the world's leading organisations succeed by solving their most complex and sensitive security challenges. RSA's information-centric approach to security guards the integrity and confidentiality of information throughout its life cycle - no matter where it moves, who accesses it or how it is used.

RSA offers industry-leading solutions in identity assurance and access control, data loss prevention, encryption and key management, compliance and security information management and fraud protection. These solutions bring trust to millions of user identities, the transactions that they perform, and the data that is generated.

SecureData

SecureData is a specialist, value-added distributor of perimeter, application, network, endpoint, storage and identity information security solutions and risk management solutions for the African sub-continent and Indian Ocean islands. A cross-section of the available solutions from SecureData illustrates wide coverage of the following information security and risk management domains: business continuity, security appliances and devices, hardware authentication, identity and access management, security and vulnerability management, secure content management, threat management and security services.

SecureData's information security and risk management solutions include best-of-breed solutions, devices and appliances for the perimeter, data centres, applications, network, endpoints, messaging and Web. In addition, as a value-add to vendor, channel and customer, SecureData also provides a full complement of support, pre-sales. and professional services around the solutions positioned in each discrete security vertical.

For more information, visit SecureData at http://www.securedata.co.za

Editorial contacts