Proxy Detection – A Test Security Breakthrough

The new Proxy Detection Tool provides administrators with information and options for handling situations when malicious software is detected. If malicious software (e.g., malware or hardened virtual machine) commonly used by hired proxy testing services to access and control a candidate’s machine while testing online is detected, Webassessor now automatically flags the suspicious activity. 

When the suspicious activity is flagged, the information is available in the session review. The options available to administrators include:

• Detect and report the event only
• Automatically suspend the candidate test session prior to the content being displayed
• Automatically route a decoy test form to the candidate

The first option, Detect, records and tracks malware detection for administrators to review and act according to their test security policies. Candidates will be unaware that malware was detected. 

If the next option, Suspend, is activated, and suspicious behavior is detected, in addition to the above steps, the candidate will be notified that their exam instance has been suspended. The suspension notice does not give the candidate the reason for the suspension, the messaging is the same as displayed for other suspension reasons.

The final option, Decoy Test Form, is designed to allow administrators to capture and track the event and allow the candidate to proceed with their exam but using a decoy test form instead of a real test form. This protects the integrity of your existing test forms without tipping off the candidate that you have been notified of their use of malicious software.

A Decoy Test Form may contain retired or specially created items that are not used in live forms.  Decoy Test Forms are assigned by using the ‘Edit Test Form’ tab. Webassessor allows administrators to create multiple decoy test forms and they can be configured to behave the same as a regular test form. Once launched in place of the live test form, the event will be recorded for administrators to review and act based on their test security policies.