2. About Trusteer Rapport
• A lightweight browser security plug-in and
security service
• Protects relationship with banks against online
identity theft and fraud – even when anti-virus
fails
• Downloadable from your bank in seconds
• Three main features
– Browser Vault
– Armored Communications
– Actionable Intelligence
4. The Rapport Browser Vault
Internet
Your browser
maintains an internal
record of Web pages
viewed and
information entered.
5. The Rapport Browser Vault
Internet
Your bank statements,
transactions, and login
information are all stored
inside the browser for the
duration of the session.
6. The Rapport Browser Vault
Internet
The browser has many
doors (aka interfaces)
through which its internal
storage is accessible to
others
7. The Rapport Browser Vault
These doors are legitimate
Internet and are designed to allow
toolbars and other software
to interface with the
browser
8. The Rapport Browser Vault
Internet Unfortunately these doors
are also used by malware
to read sensitive
information, tamper with
transactions and modify
Web pages.
9. The Rapport Browser Vault
Internet
Rapport replaces
internal browser
storage with a vault
that cannot be opened
by malware
10. The Rapport Browser Vault
Bank
Internet
Your bank configures a
vault policy to identify
which information should
not be accessible
through any browser
doors
Passwords
Transactions
Statements
11. The Rapport Browser Vault
Internet
Rapport enforces the
policy and prevents
access to sensitive
information residing
within the vault.
Malware, whether
recognized by antivirus
or not, is defeated.
13. Rapport’s Armored Communication
Fraudulent Server Bank Server
Internet
Your browser consults a
“DNS” service (usually
provided by your Internet
Service Provider) to find
your bank’s server on the
Internet.
DNS
14. Rapport’s Armored Communication
Fraudulent Server Real Server
Internet
Unfortunately many attacks
allow criminals to control or
bypass this DNS service
and direct customers to
fraudulent servers
DNS
15. Rapport’s Armored Communication
Fraudulent Server Real Server
Internet
Rapport provides a secure
DNS service that also
authenticates the Web site
to makes sure that you
safely reach the real bank
server
18. Rapport’s Actionable Intelligence
Bank
Internet
Attempts to crack the
Rapport browser vault or
direct customers to
fraudulent Web sites are
reported to the Trusteer
Fraud Prevention Center
Fraud Prevention Center
19. Rapport’s Actionable Intelligence
Bank
Internet
Security and fraud
prevention experts
analyze these events to
detect new threats
Fraud Prevention Center
20. Rapport’s Actionable Intelligence
Bank
Internet
Based on this analysis,
the bank takes server-side
actions to defeat the
threat and protect
customer accounts
Fraud Prevention Center