GreatHorn unveils biometric solution with keystroke analysis to match typing patterns
GreatHorn, the leading cloud email security provider focused on managing risk from advanced email threats, unveiled the first and only biometric solution that effectively identifies compromised accounts and blocks takeover attempts by validating users with their unique typing patterns.
The addition of Account Takeover Protection to the GreatHorn Email Security platform—which automatically combines data science, machine learning techniques, and technical analysis with human context—ensures that customers have the most comprehensive and powerful protection against the most sophisticated threats.
By leveraging passwordless authentication to further enhance its capabilities, GreatHorn ensures that organizations can now benefit from first-factor authentication without adding friction to end-user email workflows.
Today, compromised cloud accounts can be extremely difficult to identify, often surfacing only after the compromised account has been abused, resulting in potentially significant financial and reputation damage to the affected organization.
While multi-factor authentication (MFA) can be an effective strategy for reducing account takeover, a recent Redmond Magazine article reported that less than 10 percent of Microsoft’s enterprise customers have deployed MFA.
With the launch of Account Takeover Protection, GreatHorn has introduced a way to identify compromised accounts that is easy to implement, difficult to bypass, and minimally disruptive for users.
Built on top of GreatHorn Reporter, GreatHorn’s client-side plug-in, Account Takeover Protection uses machine learning techniques to capture a user’s unique typing pattern on both desktop and mobile devices.
After initial authorization, GreatHorn will use a pre-determined trigger—e.g., frequency, time delay, or communication pattern anomalies—to reauthenticate the user. The tool does not capture keystrokes. It analyzes keystroke dynamics, such as speed, pressure, and timing between key press and release.
Administrators can configure actions based on authorization failures, such as inserting a warning banner to the recipient, removing the message upon send, alerting the security team, or simply logging the event for later analysis. Failed attempts populate into the GreatHorn dashboard, providing context for faster incident response.
The risk of account takeover is pervasive across all industry verticals. With increasing frequency, malicious actors are using social engineering, phishing, and other technical methods to circumvent multi-factor authentication in order to obtain the one-time passcode and access protected accounts.
The takeover of just a single business account can have a far-reaching impact. At best, it reveals private company communication and provides access to confidential documents in Google Drive or SharePoint. But the compromised account can also be used to release a barrage of impersonation attacks that lead to substantial financial loss. Or worse, it can be used to access business-critical systems in order to wreak havoc on an enterprise.
“Most email solutions rely on binary or perimeter-based analysis to prevent email attacks, but these methods fail to identify when a legitimate account has been compromised,” said Kevin O’Brien, co-founder and CEO, GreatHorn.
“Our Account Takeover solution uses proprietary, best-in-class keystroke analysis to match typing patterns as a unique identifier. Your typing pattern is unique to you and extremely difficult to replicate, making it highly accurate and nearly impossible to circumvent. And because the action of typing is a part of a user’s everyday workflow, it allows for periodic validation with minimal disruption.”
GreatHorn’s new biometric-based Account Takeover Protection is now available in beta and will be showcased during RSA Conference 2020.