Luxsoft z/OS

UmbrellaFraud Modernization Guide

SecurityApplication - Banking/Finance

UmbrellaFraud is a security product by Luxsoft. Explore technical details, modernization strategies, and migration paths below.

Product Overview

UmbrellaFraud is a mainframe-based fraud detection system designed for banking applications running on z/OS.

UmbrellaFraud supports LDAP and SAML 2.0 for authentication and uses RBAC for access control.

Modernization Strategies

Rehost

Timeline:
6-12 months

Lift-and-shift to cloud infrastructure with minimal code changes. Fast migration with lower risk.

Refactor (Recommended)

Timeline:
18-24 months

Optimize application architecture for cloud while preserving business logic. Best ROI long-term.

Replatform

Timeline:
3-5 years

Complete rewrite to cloud-native architecture with microservices and modern tech stack.

Frequently Asked Questions

General

What is UmbrellaFraud?

UmbrellaFraud is a mainframe-based fraud detection system designed for banking applications running on z/OS. It leverages the Hogan application infrastructure to monitor transactions and identify potentially fraudulent activities in real-time.

How does UmbrellaFraud work?

UmbrellaFraud integrates with existing banking systems through APIs and data feeds. It analyzes transaction data, customer data, and other relevant information to detect patterns indicative of fraud. When suspicious activity is detected, alerts are generated and sent to fraud analysts for further investigation.

What types of fraud can UmbrellaFraud detect?

UmbrellaFraud supports real-time fraud detection, rule-based fraud detection, and anomaly detection. It can identify various types of fraud, including credit card fraud, wire transfer fraud, and account takeover fraud.

What techniques does UmbrellaFraud use for fraud detection?

UmbrellaFraud uses a combination of techniques, including statistical analysis, machine learning, and rule-based logic, to identify fraudulent activity. It continuously learns from new data to improve its accuracy and effectiveness.

Technical

What types of APIs does UmbrellaFraud expose?

UmbrellaFraud exposes REST APIs for integration with other systems. Specific API endpoint patterns include `/transactions`, `/alerts`, and `/customers`. It also supports native APIs for integration with Hogan applications.

What are the main system components of UmbrellaFraud?

The main system components of UmbrellaFraud include the Transaction Analyzer, the Rule Engine, the Anomaly Detector, and the Alert Manager. These components communicate through internal messaging queues.

What databases or storage mechanisms are used by UmbrellaFraud?

UmbrellaFraud uses DB2 for storing transaction data, customer data, and fraud rules. It also uses VSAM datasets for storing configuration parameters and logging information.

What administrative interfaces are available for UmbrellaFraud?

UmbrellaFraud provides a web-based administrative interface for managing users, configuring fraud rules, and monitoring system performance. It also provides a CLI for performing administrative tasks.

What are some common commands in UmbrellaFraud?

Common commands include: DISPLAY-FRAUD-RULES (shows current rules), MODIFY-FRAUD-RULE (changes a rule), GENERATE-FRAUD-REPORT (creates a report), and VIEW-ALERT-DETAILS (shows alert details).

Business Value

How does UmbrellaFraud provide business value?

UmbrellaFraud helps banks reduce fraud losses by detecting and preventing fraudulent transactions in real-time. It also improves customer satisfaction by minimizing the impact of fraud on legitimate customers.

How does UmbrellaFraud help with regulatory compliance?

By implementing UmbrellaFraud, banks can comply with regulatory requirements related to fraud prevention and data security. This helps to avoid fines and reputational damage.

How does UmbrellaFraud help with fraud prevention strategies?

UmbrellaFraud provides detailed reports and dashboards that allow banks to track fraud trends and measure the effectiveness of their fraud prevention efforts. This helps to optimize fraud prevention strategies and allocate resources effectively.

Security

What authentication methods are supported by UmbrellaFraud?

UmbrellaFraud supports LDAP and SAML 2.0 for authentication. It also supports X.509 certificates for secure communication.

What access control model is used by UmbrellaFraud?

UmbrellaFraud uses RBAC with role-based permissions to control access to sensitive data and functionality. This ensures that only authorized users can perform specific actions.

What encryption is used by UmbrellaFraud?

UmbrellaFraud uses AES-256 encryption to protect sensitive data at rest and in transit. This ensures that data is protected from unauthorized access.

What audit/logging capabilities exist in UmbrellaFraud?

UmbrellaFraud provides comprehensive audit logging capabilities. All user actions and system events are logged and can be reviewed for security purposes.

Operations

What monitoring capabilities exist in UmbrellaFraud?

UmbrellaFraud provides a web-based monitoring dashboard that displays key performance indicators (KPIs) such as transaction volume, fraud rate, and system resource utilization. This allows administrators to monitor the health and performance of the system.

What logging capabilities exist in UmbrellaFraud?

UmbrellaFraud generates detailed logs that can be used for troubleshooting and analysis. These logs can be accessed through the administrative interface or downloaded for offline analysis.

Can UmbrellaFraud send alerts to administrators?

UmbrellaFraud can be configured to send alerts to administrators when certain events occur, such as high fraud rates or system errors. This allows administrators to respond quickly to potential problems.

How is user management handled in UmbrellaFraud?

User management is handled through the administrative interface. Administrators can create, modify, and delete user accounts, and assign roles and permissions to users.

Ready to Start Your Migration?

Download our comprehensive migration guide for UmbrellaFraud or calculate your ROI.

Calculate ROI