This session is for members.

Subscribe or log in to watch every GoSec session.

Subscribe Log in

This recording is not available yet.

Protect Your Customers Against Identity Fraud

Download resources

About this session

Keith Lax, ForgeRock's pre-sales engineering lead, explains how artificial intelligence and machine learning are used across identity management to fight fraud. He frames AI's role in two buckets: analysing very large data sets, such as governance certification campaigns, and comparing user behaviour to build peer groups, then feeding the resulting signals into front-end access decisions such as step-up authentication and continuous zero trust reassessment. He argues most fraud projects struggle less with detection algorithms than with the orchestration layer that turns a risk score into an actual application decision without redeploying every client app. Concrete attack examples include credential stuffing at login, AI-crafted phishing emails timed to mergers and acquisitions anxiety, and bots that simulate human typing rhythm and mouse movement, all countered by comparable AI-driven detection, including using AI to spot AI-written phishing text. He walks through an orchestration canvas where teams tune which risk signals are checked and when, and closes on dashboards administrators use to see why a user was stepped up and to justify the program's cost. Q&A is invited but not shown in the recording.

Key takeaways

  • Invest in the orchestration layer, not just the AI model: a risk score is useless until you can change what an application does with it without a new release cycle.
  • Use AI to detect AI: the same pattern-matching techniques attackers use to write convincing phishing emails can be turned around to flag AI-generated text.
  • Watch for fraud campaigns timed to major events like mergers, where targets are more anxious and less likely to question an unusual request.
  • Build peer-group behaviour comparisons (UBBA) so a user's activity is judged against people genuinely similar to them, not one static baseline.
  • Track and dashboard why each step-up or block decision fired; it becomes the tool stakeholders use to prove the program's return on investment.

Speakers

Keith Lax
Keith Lax
Senior Manager, Sales Engineering · Forgerock

A pre-sales solutions architect covering Government, Financial, and Enterprise verticals for Eastern Canada at ForgeRock.

Resources

Tags

More from GoSec 2023

Also from Keith Lax

On the same topic

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.