ICICI Bank : MalScan

With over 24 million retail, corporate and NRI banking clients and a

comprehensive range of financial products and services offered online, ICICI has

identified the need to protect its customer base from the rapidly growing threat

of Drive by Downloads. The company implemented comprehensive security mechanisms

to ensure their online banking web applications were protected against hackers

seeking to inject malware. However, they also required monitoring controls to

ensure their clients were protected from injected malicious code that would

silently download and install malicious software. Key requirements of the bank

were as follows: monitor ICICI's websites 24x7 for malicious code injection,

identify injected links redirecting web browsers to malicious websites, identify

active drive-by-downloads that automatically install malware on client

computers, alert ICICI personnel immediately upon malware injection. These

requirements were achieved by implementing cloud malware monitoring services.

ICICI Bank's 24x7 Security Operation Center manages crawling, scanning and

reporting options through a custom cloud-based console. Upon malware injection,

the monitoring solution delivers SMS and email alerts with details including

malware type, source and malware target. As malware monitoring agents connect to

ICICI's websites using standard browser sessions, there is no negative impact on

the websites being monitored.