Keynote Speech By Jim Geovedi - The 21st Century Bank Job

1. THE
21ST CENTURY
BANK JOB@GEOVEDI

2. EVERTHOUGHT ABOUT
ROBBING A BANK?

3. JOHN DILLINGER KUSNI KASDUT
OLD SCHOOL

4. HACKING A BANK
IS EASY
..OR MAYBE NOT!!

5. MODERN BANK JOBS
CASE STUDIES

6. CREDIT CARD FRAUD

7. ATM SKIMMING

8. SOCIAL ENGINEERING

9. &IT’S EASIER THEY ARE CLUELESS
WHYTARGETINGTHE USERS?
[MOST OFTHETIME]

10. HOW ABOUT HACKING?

11. Swordfish(2001)

12. INSIDE
THEBANK’S
ITSYSTEM

13. CORE
TRADEFINANCE TREASURY
DATAWAREHOUSING
ANTIMONEYLAUNDRINGREMITTANCE
CRM
COLLECTIONSYSTEM
ATMSWITCH
INTERNETBANKING
ISLAMICBANKING
MOBILEBANKING
CARDMANAGEMENT

14. NETWORKOFTRUST
EMPLOYEES
MANAGEMENT
GOVERNMENT
VENDORS
CUSTOMERS

15. STORYTELLINGSESSION
HOWWECOMPROMISEDBANKS
ONSOMEPENTESTENGAGEMENT

16. COMMONPROBLEMS
PEOPLE PROBLEMS
WEAK PASSWORDS
LACK OF AWARENESS
LACK OF SKILLS
SYSTEM PROBLEMS
OUTDATED SYSTEMS
INSECURE CONFIGURATIONS
INSECURE PROTOCOLS

17. MANAGEMENTPROBLEMS

19. MERCHANTS

20. ATM COMPROMISE

21. WTFKTHXBYE

23. WHO’SRESPONSIBLE?

24. BANK
CUSTOMER
AccordingtoCustomer
BANK
CUSTOMER
AccordingtoBank
RESPONSIBLE
RESPONSIBLE
RESPONSIBLE
SECURITYRESPONSIBILITY

25. BANKS’EFFORTS TO INCREASE THE SECURITY LEVEL

26. ENCRYPTION

27. TWO-FACTOR AUTHENTICATIONS

28. TWO-FACTOR AUTHENTICATIONS

29. REGULATION COMPLIANCE

30. REGULAR SECURITY ASSESSMENT

31. WHAT’S NEXT?

32. WHAT’S NEXT?

33. THANKS!

34. CREDITS:
Photos:
• [Page 01] http://www.flickr.com/photos/reddogfever/4580710899/
• [Page 02] http://www.flickr.com/photos/lanuiop/226760877/
• [Page 04] http://www.flickr.com/photos/deepblue66/132439533/
• [Page 05] http://www.flickr.com/photos/marcelnicolai/4600107436/
• [Page 09] http://www.flickr.com/photos/paulwatson/411792788/
• [Page 10] http://www.flickr.com/photos/jliba/3696592874/
• [Page 11] Swordfish Hack — http://www.youtube.com/watch?v=zfy5dFhw3ik
• [Page 12] http://www.flickr.com/photos/skreuzer/354316778/
• [Page 13] http://www.flickr.com/photos/tim_d/184018928/
• [Page 14] http://www.flickr.com/photos/eskimoblood/2111672366/
• [Page 15] http://www.flickr.com/photos/beneathourfeet/2502755729/
• [Page 16] http://www.flickr.com/photos/formalfallacy/2057169454/
• [Page 16] http://www.flickr.com/photos/dolor_ipsum/3262262008/
• [Page 17] http://www.flickr.com/photos/24443965@N08/3460357646/
• [Page 23] http://www.flickr.com/photos/kk/4191131924/
• [Page 25] http://www.flickr.com/photos/ari/2347593532/
• [Page 27] http://www.infosurhoy.com/cocoon/saii/images/2010/03/01/photo4.jpg
• [Page 28] http://en.wikipedia.org/wiki/File:CryptoCard_two_factor.jpg
• [Page 29] http://blogs.ft.com/gapperblog/files/2008/03/bank-regulation.jpg
• [Page 30] http://www.flickr.com/photos/dfarrell07/5013882149/
• [Page 31] http://www.flickr.com/photos/joshmt/2526552173/

35. @GEOVEDI
CHECKOUT:
http://slideshare.net/geovedi