Company: ThreatMetrix, San Jose, CA
Entry Submitted By: Walker Sands
Company Description: ThreatMetrix is the first company to combine advanced device identification and malware detection in a single platform backed by a global network of shared intelligence. Delivered from the cloud, the ThreatMetrix™ Cybercrime Defender Platform helps businesses protect the integrity of online transactions, accounts and identities with layered and integrated defenses.
Nomination Category: Products & Product Management Awards Categories
Nomination Sub Category: New Product or Service of the Year - Software - Security Solution

Nomination Title: ThreatMetrix's Persona ID Rules

Tell the story about this nominated product or service (up to 525 words). Describe its function, features, benefits, and performance to date:

The ThreatMetrix Cybercrime Defender Platform is the first industry solution that integrates sophisticated malware detection and advanced device identification in a single, unified platform. In February 2013, ThreatMetrix updated the platform to include behavioral analysis in the form of ThreatMetrix™ Persona ID Rules. This addition enables real-time linkage of a current transaction to related transactions through a matrix of attributes associated to the visitor, device and connection.

ThreatMetrix Persona ID Rules uncovers anomalous behavior in real-time through the association of related activity and connected entities such as email addresses, transactions, accounts, devices, IP addresses, geo-location, proxies and physical addresses. It allows the use of custom fields such as credit cards for creating customer-specific user profile building. The Rules then score the divergence (anomalies) or convergence (similarities) between current and historical attributes.

Cybercriminals exploit the fact that many of today’s traditional authentication and verification systems rely largely on breached personal data, which is easily discoverable or self-disclosed on social networks. If an identity is stolen and replayed on a compromised device in the hands of a cybercriminal or foreign state actor, ThreatMetrix can detect the threat through Persona ID Rules and send an alert. With PersonaID, the historically separate worlds of fraud and security are now able to merge with a comprehensive view of the threat landscape.

In 2012 alone, cyber-attacks resulted in data breaches at high profile brands such as Yahoo!, eHarmony, Zappos, LinkedIn and Global Payments. The result is that millions of personally identifiable information entities including credit cards, Social Security numbers and passwords have fallen into the hands of  cybercriminals. Threatmetrix circumvents these attacks through the Global Trust Intelligence Network – a repository of devices, anonymized identities, transactions and interactions, that collects more than 300 million monthly transactions in real-time. Persona ID Rules enables customers to query this repository in real-time to determine whether a transaction is a legitimate customer or actually a cybercriminal hiding behind a spoofed or stolen alias.

With the wealth of historical information in the Global Trust Intelligence Network and the Persona ID Rules, ThreatMetrix customers can now:

•Assess the risk associated with the person or device engaged in an online transaction.
•Examine related transactions and determine whether they have been flagged as high risk in the past.
•Identify a legitimate customer based on whether the device and identity associated has been flagged as low risk in previous transactions.
•Provide a more comprehensive view of a visitor’s identity based on historically related transactions linked to the same identity or device.
•Detect unusual velocities in identities. For example, if transactions coming from an identity are flagged low risk or without any associated historical incidence of fraud, a business can safely screen the transactions in real-time for a frictionless, positive customer experience.
•Determine if a device seen across multiple identities, time zones and geographies is flagged as suspicious, relative to the norm.

In comparison to other identity profiling solutions, only ThreatMetrix matches the device – computer, tablet or smartphone – used in a transaction. This gives financial service firms, e-commerce companies, government agencies, social media networks and enterprises confidence by knowing who owns the devices used in each transaction.

Upload a collection of supporting files and web addresses to our server to provide more background information to the judges. You may upload any number of attachments and URLs through the "Add Attachments, Videos, or Links to This Entry" link above. (Do NOT list your URLs below.)

Provide a brief (up to 125 words) biography about the leader(s) of the team that developed this nominated product or service:

ThreatMetrix is the fastest-growing provider of integrated cybercrime prevention solutions. The ThreatMetrix™ Cybercrime Defender Platform helps companies protect customer data and secure transactions against payment fraud, malware, account takeover, fraudulent new registrations, data breaches, as well as man-in-the browser (MitB) and Trojan attacks. The platform consists of advanced cybersecurity technologies, including TrustDefender™ ID, which is cloud-based, real-time device identification, malware protection with TrustDefender™ Cloud and TrustDefender™ Client, as well as TrustDefender™ Mobile for smartphone applications. ThreatMetrix was named to the Wall Street Journal’s “Next Big Thing” listing of the top 50 start-ups in the U.S., as well as to Business Insider’s “Top 15 Most Important Start-ups of 2013.” ThreatMetrix cybersecurity solutions protect more than 1,500 customers and 8,500 websites across a variety of industries.

.

.