|GREEN ARMOR SOLUTIONS||
sITEaUTH: What It Is
SiteAuth is a software package that complements and seamlessly overlays on existing login and authentication systems. It utilizes psychologically-sound visual cues that will make it obvious whether a user has landed on a legitimate web page or has been directed to a clone that will steal data and possibly money – all without requiring users to register, answer challenge questions, or undergo any extra steps during the login process.
SiteAuth protects organizations, their employees, and their customers from phishing, pharming, and Internet fraud. It can help stop the digital leakage of corporate trade secrets or personal sensitive information, and can help prevent financial losses that may incur as a result of such leaks. SiteAuth was designed by a team consisting of an information-security expert and a psychologist, and leverages various aspects of both disciplines to protect even untrained users who do not make any conscious effort to stay secure.
SiteAuth is a software solution that can be delivered in an API format, and can integrate into and can run on numerous platforms. It scales to accommodate environments of all sizes, and can be used in conjunction with multi-factor authentication and fraud-detection systems. It can also be embedded into third-party software packages and cloud applications.
How It Works
Criminals rely on their ability to replicate the “look and feel” of a legitimate business’s online presence in order to trick users into divulging sensitive information. Green Armor products make it exceedingly difficult for criminals to do so.
The simultaneous elimination of unlimited-cellular-data plans coupled with the proliferation of Wi-Fi enabled devices has caused the number of people utilizing public WiFi networks for shopping and banking to skyrocket. When people conduct such activities over such networks, however, they are at risk of accessing clone/evil-twin sites -- even when they type the full URL of the site they are accessing, and even when using supposedly secure, encrypted communications to banks or online stores. Criminals can set up phony access points with names identical to legitimate ones, and use any one of several hacking techniques to steal data and money from users.
Green Armor's SiteAuth defends against such risks and allows users using tablets, laptops, or smartphones over public WiFi networks to securely bank or shop.
Security is achieved through the use of easily recognizable visual cues that appear during the user login process. These cues were designed based on advanced psychology, and, even after a user’s first access to a web site, become an integral part of the user’s visual experience on that site; if the cues are not present on a subsequent login, even users who are not consciously looking for them will notice that something looks “very wrong” with the site that they are accessing and will not enter their credentials or sensitive information.
Visual cues vary between users, but are identical on each login for any particular user. Cues may be customized by an organization deploying Green Armor products, but typically consist of colored boxes with basic text elements (such as letters, short words, or short numbers) or famous phrases/quotes within them.
Cues are generated by applying a one-way mathematical cryptographic function to portions of text that the user types and a series of keys established by (and known only to) the organization – criminals cannot spoof or generate the correct cues for any particular user. Users who access a phishing site will not see their cues and will quickly realize that “something is wrong.”
SiteAuth works with numerous forms of user authentication – so whether your users use usernames and passwords, one-time passwords, hardware tokens, biometrics, or other techniques to authenticate themselves to your system – you can leverage SiteAuth products to ensure that their authentication information is in fact being sent to you and not to a criminal. SiteAuth overlays existing authentiction systems in a simple and clean fashion, keeping installation and support costs down.
Furthermore, SiteAuth products can help your organization meet FFIEC, NCUA, or HIPAA regulations by providing two-way (mutual) authentication – but without forcing you to inconvenience your users in order to achieve that improved level of protection.
The elegance and simplicity of SiteAuth can provide significant benefits to many organizations transacting business online or allowing their employees remote access to sensitive resources. Among these benefits are:
Advantages Over Alternative Anti-Phishing Technologies
SiteAuth offers several significant advantages over alternative offerings:
Green Armor™ also provides professional services and consulting associated with our information-security products. We help all of our customers install and integrate our offerings into their environments, so as to ensure quick and successful implementations. Of course, Green Armor also offers ongoing support for all of our product deployments.
The marks Green Armor Solutions, Green Armor, SiteAuth, Identity Cues, Identity Cues for Websites, Identity Cues for Email, Identity Cues Two Factor, and the Green Armor Solutions logo are trademarks of Green Armor Solutions, Inc. All other marks are the trademarks of their respective owners.