We are proud to announce that Forrester named IBM a Strong Performer in its new report, “The Forrester Wave: Risk-Based Authentication, Q3 2017.” This is the first update to the Forrester Wave for Risk-Based Authentication (RBA) since Q1 2012, and IBM’s first time participating in the report as one of the eight most “significant providers.”

Only one vendor was ranked as a Leader in the report, and IBM is one of three vendors to earn a Strong Performer placement. IBM earned the highest scores possible in the “future overall market and development plans for RBA and technology” and “solution implementation strength” criteria.

DOWNLOAD THE FORRESTER WAVE FOR Risk-Based Authentication

How Vendors Were Evaluated

Forrester updated this Wave in response to new innovations in RBA, such as the introduction of machine learning algorithms, increased usage of two-factor authentication with biometric and behavioral authentication, and the widespread use of flexible cloud deployment models.

Forrester noted in the report that account-based takeover is on the rise, causing at least $6.5 billion to $7 billion in annual losses across financial services, insurance, e-commerce, health care, gaming and gambling, and other industries.

Forrester used a combination of vendor surveys, product demos, customer reference calls and unsupervised demonstration environment usage to evaluate vendors for this Wave.

The eight vendors selected for evaluation met the following criteria, according to Forrester:

  • A thought-leading RBA portfolio of products and services;
  • Total RBA revenues of at least $10 million with at least 10 percent growth;
  • At least 60 paying RBA customer organizations in production;
  • An unaided mindshare within Forrester’s end user customers; and
  • An unaided mindshare within Forrester’s vendor customers.

DOWNLOAD THE FORRESTER WAVE FOR Risk-Based Authentication

A Holistic Approach to Risk-Based Authentication

We believe the essential problem of fraud starts with the identity chain. We also think the traditional three types of authentication factors — something you know, something you have and something you are — must be combined with intelligent assessment of the specific risk of a user. Risk is determined by the user’s behavior and the context of their interaction (e.g., device, location, pattern of activity, etc.). Risk-based authentication means that high-risk users are challenged more frequently for authentication factors, while low-risk users get things done with minimal interruption.

Risk-based authentication requires a holistic approach to fraud and digital identity that incorporates positive identity corroboration with identity analytics to establish a deeper understanding of the user. This approach should also apply risk scoring to better mitigate the risks of fraud. IBM’s RBA offering integrates IBM Security Access Manager and Trusteer Pinpoint Detect to help block fraudulent activities and high-risk transactions while maintaining an excellent user experience.

DOWNLOAD THE FORRESTER WAVE FOR Risk-Based Authentication

The Forrester Wave is copyrighted by Forrester Research, Inc. Forrester and Forrester Wave are trademarks of Forrester Research, Inc. The Forrester Wave is a graphical representation of Forrester’s call on a market and is plotted using a detailed spreadsheet with exposed scores, weightings, and comments. Forrester does not endorse any vendor, product, or service depicted in the Forrester Wave. Information is based on best available resources. Opinions reflect judgment at the time and are subject to change.

More from Fraud Protection

Kronos Malware Reemerges with Increased Functionality

The Evolution of Kronos Malware The Kronos malware is believed to have originated from the leaked source code of the Zeus malware, which was sold on the Russian underground in 2011. Kronos continued to evolve and a new variant of Kronos emerged in 2014 and was reportedly sold on the darknet for approximately $7,000. Kronos is typically used to download other malware and has historically been used by threat actors to deliver different types of malware to victims. After remaining…

How Security Teams Combat Disinformation and Misinformation

“A lie can travel halfway around the world while the truth is still putting on its shoes.” That popular quote is often attributed to Mark Twain. But since we're talking about misinformation and disinformation, you’ll be unsurprised to learn Twain never said that at all. In fact, no one knows who first strung those words together, but the idea that truth spreads slowly while lies spread quickly is at least several hundred years old. The “Twain” quote also serves to…

A View Into Web(View) Attacks in Android

James Kilner contributed to the technical editing of this blog. Nethanella Messer, Segev Fogel, Or Ben Nun and Liran Tiebloom contributed to the blog. Although in the PC realm it is common to see financial malware used in web attacks to commit fraud, in Android-based financial malware this is a new trend. Traditionally, financial malware in Android uses overlay techniques to steal victims’ credentials. In 2022, IBM Security Trusteer researchers discovered a new trend in financial mobile malware that targets…

New DOJ Team Focuses on Ransomware and Cryptocurrency Crime

While no security officer would rely on this alone, it’s good to know the U.S. Department of Justice is increasing efforts to fight cyber crime. According to a recent address in Munich by Deputy Attorney General Lisa Monaco, new efforts will focus on ransomware and cryptocurrency incidents. This makes sense since the X-Force Threat Intelligence Index 2022 named ransomware as the top attack type in 2021. What exactly is the DOJ doing to improve policing of cryptocurrency and other cyber…