IDentiWall - Making Identity Theft Useless

Identity theft has become an established and unpleasant fact of life. Huge resources are devoted to it by professional criminals. We can't stop it from happening, but we can prevent it from doing damage by making the stolen ID useless.

Some Identity Theft Headlines

"Phishing likely to blame for eBay members' data theft

Auction site's systems were not hacked"

"Questions remain about eBay members' info theft

Identity of perpetrator, scope of breach remain a mystery"

“TJX Offers Settlement as Breach Cause Is Exposed”

“Government audit slaps VA over missing IT equipment

GAO cites lack of inventory controls, personal accountability at veterans agency”

“Wi-Fi phishing scam targets business travelers

Warning to users of airport and hotel access points”

“DOJ warns U.S. citizens of phishing attack

No, the IRS is not after you (at least not via e-mail)”

“New phishing scam: Spoofed campaign site

Prospective contributors to Kerry presidential campaign are latest targets”

“Phishing scam uses PayPal secure servers

Cross-site scripting flaw opens dangerous phishin' hole”

“Phishing scam reports skyrocket in April

Financial services and retail companies were hit particularly hard”

“Phishing likely to blame for eBay members' data theft

Auction site's systems were not hacked”

“Latest 'phishing' scam targets Visa customers

E-mails advise consumers to 'reactivate their accounts”

“Hacked bank server hosts phishing sites”

“Big German banks hit by phishing attacks

This is the second such attack on Postbank in a month”

“Phishing URLs skyrocket”

“Phishing tool constructs new sites in two seconds

Easy-peasy-sleazy 0wnage in 120 seconds”

The grim situation regarding identity theft

The following are some statistics published recently:

Hacking has changed in the last couple of years from young hackers who performed their act for their amusement and sense of achievement, to professional organized crime.
In the last 12 months ending in July 2007, there were 15 million reported cases of identity theft in the US alone.
The average damage cost of such identity theft was $3,648. This amounts to a total of around $50 billion!!!

This is a staggering upturn of about 100% from just a year before. If this trend continues, and according to experts it will, we’re facing a $100 billion problem this year in the US alone.

It is apparent that we are facing an Identity Theft tsunami.
Almost 80% of Internet users use the same password they use at work when asked to open an account in a web site.
The latest Wikipedia scandal, in which commercial companies employ writers who tamper with Wikipedia articles in a way that will favor their companies, also revealed a counter measure that Wikipedia intends to use.
It is a small and free software program that is able to discover the identity of the company that made the update.
A Trojan horse that will send the user’s credentials off to the criminal costs $600.
A list of one million email addresses costs $100.
Renting a spam server that will send out millions of emails costs $500.
It is estimated that around 10% of the users fall into phishing traps.
A quick calculation shows that a phisher who sends out 1 million emails with a Trojan horse is expected to get 100,000 credentials.

To summarize the situation, we’re dealing with organized crime that is phishing for our identities through offering us goodies in innocent looking web sites such as “free ring tones”, “free news and services” or others.

They have the ability to discover the company we work for, our bank and ecommerce accounts and are willing to make use of all that.

Alarming isn’t it?

The IDentiWall Solution

While it is clear that we had lost the identity theft battle to an overwhelming number of well funded phishers and hackers, it is equally clear that if we don’t want to lose the war altogether, it’s time to fortify the next defense line -- ‘making the stolen identities useless’.

In fact that’s exactly what Made4Biz Security is doing. Made4Biz took a multi level approach which is built on the location based security and strong authentication technologies.

The location based security is manifested through its Dynamic! Security (D!S) software product which converges physical and ICT security. D!S follows up the location of employees and their login location and by correlating them; it detects unauthorized usage of stolen identities. It’s obvious that while the employee is physically present in the company’s campus, his or her user-id can’t login from the outside and vice versa.

Issues such as ‘internal identity theft’, ex-perimeter Wi-Fi airwaves usage in order to log onto the organizational network while using a stolen legitimate employee’s identity and usage of stolen lost laptops in order to penetrate the network, are dealt with easily by D!S.

Made4Biz’s IDentiWall complements Dynamic! Security by adding mobile phone based strong multi level authentication for organizational network and restricted web sites logins.

IDentiWall enables secure mobile workforce in a Deprimeterized World. Its usage of ‘One Time Password (OTP)’ makes stolen credentials unusable since one can login to the network or to a restricted site like online banking only by using the OTP that is sent directly to the user’s mobile phone.

Dynamic! Security uses IDentiWall if the user is outside the physical perimeter and tries to login onto the organizational network.

How IDentiWall can stop the "man in the browser": The man in the browser and how to starve him

Home - Dynamic Security | Privacy Policy | Copyright and Trademark Info