Akamai Technologies, Inc.  has launched its new Account Protector solution.

Using proprietary behavioral analytics and reputation heuristics, the solution is designed to extend the Akamai Bot Manager solution to also detect and prevent account takeover attacks by human threat actors in real time, without increasing friction for legitimate users.

The solution is integrated into the Akamai Intelligent Edge Platform instead of attached at a single point, so it requires no changes to existing applications.

Businesses worldwide face the complex and costly problem of account takeover, where human threat actors seize valuable digital assets — from bank account funds to retail store loyalty points to online game rare items.

Account Protector analyses requests, generating risk and trust indicators to calculate the likelihood that a user is the legitimate account owner or an impersonator. Using machine learning technology, the solution learns and self-tunes as it analyses subsequent logins for the same set of credentials.

This enables legitimate account holders to access their accounts without unnecessary friction while increasing the safety of their accounts.

Account Protector generates a user session risk score in real time during authentication, combining:

• User behavioral profiles based on signals like previously observed locations, networks, devices, and activity time. Account Protector does this while complying with data privacy laws and frameworks like GDPR and others.

• Population profiles that give a view of the behavior of a company’s user set. Variances in behavior can be compared to the entire population to detect anomalies, even if an individual user is logging in for the first time.

• Reputation data based on observed malicious activity across the network and IP, such as indications of bot activity, one user connecting from multiple locations in a short span of time, attempting to access a large number of users, and a high percentage of failed login attempts. Akamai utilizes its own vast activity databases, leveraging clean and reliable data to analyse for legitimate and malicious activity.

Account Protector performs these detections in real time, enabling action on the Akamai edge platform and/or incorporation into existing defenses within the web application. With the insights derived from the risk score, organizations can take action on the request at the edge, choosing from options such as allow, alert, block, and more.

The solution provides both real-time and historical reporting on users’ behavioral activity, which can be consumed by existing fraud tools to enhance understanding of intent and to guide strategic planning.

Account Protector is being introduced as a part of Akamai’s Platform Update and designed to increase responsiveness and augment security decision-making. For more information about Akamai’s Edge Security solutions, visit our Platform Update page.