CA RiskMinder Administration Guide › Geolocation and Anonymizer Data › Understanding Geolocation and Anonymizer Data

Understanding Geolocation and Anonymizer Data

Quova Inc., an industry leading provider of geolocation information, provides RiskMinder geolocation and anonymizer data. Quova provides the following types of data to RiskMinder:

• Geolocation data. This data classifies each IP by latitude, longitude, continent, country, and city. By default, the data is used in the Negative Country Check rule and in calculating the distance for the Zone Hopping Check rule. You can also use this data for any rules that you create by using the Rule Builder. The Country and City elements are both useful for checks on the point of access.
• Connection information. Each IP is classified by routing type, connection type, and line speed. This information, especially routing type, is useful in assessing the validity of the geolocation information. For example, if the connection type is Satellite, then the user’s location is not reliable. In practice, you can ignore this information for geolocation purposes. However, fixed connection types such as cable, DSL, and OCX are less likely to be origins of fraud because their locations are more easily backtracked to Internet accounts. You can use this data to evaluate fraud.
• Anonymizer data. Quova performs rigorous testing of IP addresses to determine if their location information is reliable. As part of this testing, Quova identifies some IP addresses as "Anonymizers". IP addresses with this status have tested positive as anonymous proxies that are used to hide the true location of the end user. While this does not necessarily indicate that the intent is fraudulent, it does clearly indicate that the user is hiding their location, and therefore represents a high risk access potential.