1. Rapport Browser Security
How it works and how it protects against
malware and other browser attacks

2. About Trusteer Rapport
• A lightweight browser security plug-in and
security service
• Protects relationship with banks against online
identity theft and fraud – even when anti-virus
fails
• Downloadable from your bank in seconds
• Three main features
– Browser Vault
– Armored Communications
– Actionable Intelligence

3. Internet
The Browser
Vault

4. The Rapport Browser Vault
Internet
Your browser
maintains an internal
record of Web pages
viewed and
information entered.

5. The Rapport Browser Vault
Internet
Your bank statements,
transactions, and login
information are all stored
inside the browser for the
duration of the session.

6. The Rapport Browser Vault
Internet
The browser has many
doors (aka interfaces)
through which its internal
storage is accessible to
others

7. The Rapport Browser Vault
These doors are legitimate
Internet and are designed to allow
toolbars and other software
 to interface with the
browser


8. The Rapport Browser Vault
Internet Unfortunately these doors
are also used by malware
to read sensitive
information, tamper with
transactions and modify
Web pages.

9. The Rapport Browser Vault
Internet
Rapport replaces
internal browser
storage with a vault
that cannot be opened
by malware

10. The Rapport Browser Vault
Bank
Internet
Your bank configures a
vault policy to identify
which information should
not be accessible
through any browser
doors
Passwords
Transactions
Statements

11. The Rapport Browser Vault
Internet
Rapport enforces the
policy and prevents
access to sensitive
information residing
within the vault.
Malware, whether
recognized by antivirus
or not, is defeated.

12. Internet
Armored
Communication

13. Rapport’s Armored Communication
Fraudulent Server Bank Server
Internet
Your browser consults a
“DNS” service (usually
provided by your Internet
Service Provider) to find
your bank’s server on the
Internet.
DNS

14. Rapport’s Armored Communication
Fraudulent Server Real Server
Internet
Unfortunately many attacks
allow criminals to control or
bypass this DNS service
and direct customers to
fraudulent servers
DNS

15. Rapport’s Armored Communication
Fraudulent Server Real Server
Internet
Rapport provides a secure
DNS service that also
authenticates the Web site
to makes sure that you
safely reach the real bank
server

16. Rapport’s Armored Communication
Bank
Internet
Your bank configures
Rapport to instruct it
how to reach its genuine
servers

17. Internet
Actionable
Intelligence

18. Rapport’s Actionable Intelligence
Bank
Internet
Attempts to crack the
Rapport browser vault or
direct customers to
fraudulent Web sites are
reported to the Trusteer
Fraud Prevention Center
Fraud Prevention Center

19. Rapport’s Actionable Intelligence
Bank
Internet
Security and fraud
prevention experts
analyze these events to
detect new threats
Fraud Prevention Center

20. Rapport’s Actionable Intelligence
Bank
Internet
Based on this analysis,
the bank takes server-side
actions to defeat the
threat and protect
customer accounts
Fraud Prevention Center

21. Internet
Thank You
www.trusteer.com