View
3.850
Download
1
Category
Preview:
DESCRIPTION
presented at IDSecConf2010 (Indonesia Security Conference 2010).
Citation preview
THE21ST CENTURY
BANK JOB@GEOVEDI
EVER THOUGHT ABOUTROBBING A BANK?
JOHN DILLINGER KUSNI KASDUT
OLD SCHOOL
HACKING A BANKIS EASY
..OR MAYBE NOT!!
MODERN BANK JOBSCASE STUDIES
CREDIT CARD FRAUD
ATM SKIMMING
SOCIAL ENGINEERING
&IT’S EASIER THEY ARE CLUELESS
WHY TARGETING THE USERS?
[MOST OF THE TIME]
HOW ABOUT HACKING?
Swordfish (2001)
INSIDE THE BANK’SIT SYSTEM
CORE
TRADE FINANCE TREASURY
DATA WAREHOUSING
ANTI MONEY LAUNDRINGREMITTANCECRM
COLLECTION SYSTEMATM SWITCH
INTERNET BANKING
ISLAMIC BANKING
MOBILE BANKING
CARD MANAGEMENT
NETWORK OF TRUST
EMPLOYEES
MANAGEMENT
GOVERNMENT
VENDORS
CUSTOMERS
STORYTELLING SESSIONHOW WE COMPROMISED BANKS
ON SOME PENTEST ENGAGEMENT
COMMON PROBLEMS
PEOPLE PROBLEMSWEAK PASSWORDS
LACK OF AWARENESSLACK OF SKILLS
SYSTEM PROBLEMSOUTDATED SYSTEMS
INSECURE CONFIGURATIONSINSECURE PROTOCOLS
MANAGEMENT PROBLEMS
MERCHANTS
ATM COMPROMISE
WTFKTHXBYE
WHO’S RESPONSIBLE?
BANK
CUSTOMERAccording to Customer
BANK
CUSTOMERAccording to Bank
RESPONSIBL
ERESPO
NSIBLE
RESPONSIBL
E
SECURITY RESPONSIBILITY
BANKS’ EFFORTS TO INCREASE THE SECURITY LEVEL
ENCRYPTION
TWO-FACTOR AUTHENTICATIONS
TWO-FACTOR AUTHENTICATIONS
REGULATION COMPLIANCE
REGULAR SECURITY ASSESSMENT
WHAT’S NEXT?
WHAT’S NEXT?
THANKS!
CREDITS:Photos:• [Page 01] http://www.flickr.com/photos/reddogfever/4580710899/• [Page 02] http://www.flickr.com/photos/lanuiop/226760877/• [Page 04] http://www.flickr.com/photos/deepblue66/132439533/• [Page 05] http://www.flickr.com/photos/marcelnicolai/4600107436/• [Page 09] http://www.flickr.com/photos/paulwatson/411792788/• [Page 10] http://www.flickr.com/photos/jliba/3696592874/• [Page 11] Swordfish Hack — http://www.youtube.com/watch?v=zfy5dFhw3ik• [Page 12] http://www.flickr.com/photos/skreuzer/354316778/• [Page 13] http://www.flickr.com/photos/tim_d/184018928/• [Page 14] http://www.flickr.com/photos/eskimoblood/2111672366/• [Page 15] http://www.flickr.com/photos/beneathourfeet/2502755729/• [Page 16] http://www.flickr.com/photos/formalfallacy/2057169454/• [Page 16] http://www.flickr.com/photos/dolor_ipsum/3262262008/• [Page 17] http://www.flickr.com/photos/24443965@N08/3460357646/• [Page 23] http://www.flickr.com/photos/kk/4191131924/• [Page 25] http://www.flickr.com/photos/ari/2347593532/• [Page 27] http://www.infosurhoy.com/cocoon/saii/images/2010/03/01/photo4.jpg• [Page 28] http://en.wikipedia.org/wiki/File:CryptoCard_two_factor.jpg• [Page 29] http://blogs.ft.com/gapperblog/files/2008/03/bank-regulation.jpg• [Page 30] http://www.flickr.com/photos/dfarrell07/5013882149/• [Page 31] http://www.flickr.com/photos/joshmt/2526552173/
@GEOVEDI
CHECKOUT:http://slideshare.net/geovedi
Recommended