AI人工智能在反欺诈中的应用.pptx

AI 人工智能在反欺诈中的应用Modern Attacks are Sophisticated and CoordinatedGrowing Attack Surface AreaMulti-faceted attack campaigns:Mass registrationsAccount take overFraud transactionsPromotional abuseVirtual gift abuseCurrency arbitrageFake reviewUser acquisition fraudFraud Trend is Quickly EvolvingDataVisor’s View on Global Fraud TrendAttack methodsIP addressDomainsEmailsNick nameAddressesAttack channelAttack life cyclesAccount targetAttack Source: The Use of Datacenter IPs from Different Attack Sectors9% all attacks come from cloud services27% percent of accounts originating from cloud service are fraudulent, 11x higher than regular IPsAttack Trend 1: Fraud Account IP Sources EvolvementFraudulent accounts moving from data center IPs to consumer IP ranges ? harder to detectSome even use cell phone ranges to tetherAttack Trend 2: Fraud Web Domain EvolvementAttack domains are mostly changing every dayFew reuse across daysAttack Trend 3: Email Address EvolvementCampaign active throughout three months2000+ users5000+ transactions with millions of dollarsDiverse email addresses6 major domains, domains evolve119 domains used in totalMany small domains: , , , Attacker use paid domain as wellSophisticated Fraudsters Moves to Legitimate Email ProvidersAttack Trend 4: User Name and Address EvolvementsUser names are harder to detectOld ways: randomly generated user names, same user namesNew ways: crawled from Web or some databases ? more realAttacks often gets real user address and namesSourced from data breaches7 2017-11-15 湖南省永州市蓝山县塔峰镇环城路845号 欢鹃钟mailto:zhiyouke3@163.comzhiyouke3@163.com70 2017-11-21 山东省泰安市泰山区东湖路48号景雨 乐mailto:souao31262@163.comsouao31262@163.com72 2017-11-18 湖南省益阳市沅江市书院路762号山琴 许 mailto:ubyq9832163@163.comubyq9832163@163.com78 2017-11-22 上海上海市奉贤区齐贤镇东航南公路910号尉莺华 mailto:wentan662688@163.comwentan662688@163.com72 2017-11-13 辽宁省朝阳市(市辖区)朝凤三段1063号泉温 阎 mailto:pglqe8518brtk@163.compglqe8518brtk@163.com78 2017-11-23 江苏省徐州市鼓楼区鼓屏路10号 应菲 蒋 mailto:feichechuiran@163.comfeichechuir