IBVA - Intra Browser Vunerability Assessment

大量易受伤害的人使用在线金融服务遭受了重大损害，导致不断进行咨询、罚款和监管行动。然而，检测漏洞的方法完全是面对面的或基于电话的。不存在在线漏洞评估方法。这正成为引入保护这些弱势消费者所需的监管改革和在线金融服务民主化的重大障碍：弱势群体与其他任何人一样有权使用在线金融服务，而且应该能够安全地使用。在这个项目中，LAB打算开发一种可应用于金融服务机构在线平台的浏览器内漏洞评估方法，从而帮助他们更好地识别和服务弱势客户。为了识别弱势个人，该方法将采用行为生物识别。目前，行为生物识别技术被应用于网上银行、电子商务、支付和高安全认证市场的下一代用户安全解决方案。该方法用于根据个人与智能手机、平板电脑或鼠标屏幕和键盘等计算机设备互动的独特方式来识别个人。Lab还将检测个人在线互动的独特方式，但不是为了识别个人身份或防止欺诈，而是寻找漏洞的指标。一旦被识别出来，这些脆弱的消费者将得到更好的服务，使用营销世界最新的智能个性化技术，通过旅程适应、干预和轻推来适当地指导和标示他们。改善脆弱的客户保护和在线体验将使这些客户能够安全地享受其他人口享有的数字化产品的好处，仅在英国就可能影响1000万人。

Significant detriments have been suffered by very large numbers of vulnerable people using online financial services, leading to ongoing consultations, fines and regulatory action. However, methods of detecting vulnerability are exclusively face-to-face or phone-based. No online vulnerability assessment methods exist. This is becoming a significant impediment to introducing the regulatory reform needed to protect these vulnerable consumers and democratising online financial services: vulnerable people are just as entitled to use online financial services as anyone else, and should be able to do so safely.In this project, LAB intends to develop an intra-browser vulnerability assessment methodology that can be applied to financial service organisations' online platforms and thereby help them better identify and serve vulnerable customers.To identify vulnerable individuals, the methodology will deploy behavioural biometrics. Currently, behavioral biometrics is applied in next-generation user security solutions for online banking, e-commerce, payments and high-security authentication markets. The method is used to identify individuals based on the unique way they interact with computer devices like smartphones, tablets or mouse-screen-and-keyboard. LAB will also detect the unique way individuals interact online, but not to identify individuals or prevent fraud, instead looking for indicators of vulnerability.Once identified, these vulnerable consumers will then be better served using the latest intelligent personalisation techniques from the marketing world to guide and signpost them appropriately using journey adaption, interventions and nudges.Improving vulnerable customer protection and experience online will allow these customers to safely enjoy the same benefits of digitised offerings the rest of the population enjoy, potentially impacting 10 million+ people in the UK alone.