atm physical attacks how to set up cost effective criminal ... · walkman cassette player! the...

EUROPE ATM & PAYMENTS INNOVATION SUMMIT

15 - 17 OCTOBER 2019

SHERATON ROMA HOTEL & CONFERENCE CENTER

THE JOURNEY CONTINUES

ATM physical attacks

How to set up cost effective criminal deterrence

R&D Team Leader

Rui Pereira

[email protected] +351967124141

Feerica & Me

Company Foundation: 1982

Country of Origin: Portugal

Headquarters: Mafra – Lisbon

Main Activity: Banking Security

Employees: 150

Facilities: 4000 m2

Join ATM Industry: 1998 o Papelaco o Diebold

Join Feerica: 2001

Technology Integration Director o Security Safes & Locks o Access Control o Video Surveillance o Alarms & Monitoring o Physical Security

ATM IBNS technology: since 2006

Project SMARTSTAIN o R&D Team leader since 2010 o Deployment in over 20

countries

www.feerica.com

Feerica Worldwide Footprint

Today’s Presentation

ATM physical attacks

How to set up cost effective criminal deterrence

Ramsomware

Transaction Reverse Fraud

Jackpotting

Lazarus

Malware

Skimming

Shimming Cash Trapping

Cash Shrinkage

Deep Skimming

WannaCry

Ram Raid Gas Explosions

Solid Explosions

Door Extraction

Lock Drilling

Jaw of Life

MageCart Group

Zebrocy

APT3

KovCoreG Group WauchulaGhost VandaTheGod Anonymous

Swift Cashout

Volodya APT28

APT10

Magecart Group

Clearance Patriot

Clearance Patriot

GnosticPlayers

eGobbler

Comms Hijacking

Lancers

Plasma Cutters

Torches

Explosive Gel

Explosive Putty

Smash & Grab

Pull-out’s

Card Trapping

Cash Trapping

Lebanese Loop

Shoulder Surfing

Fake Fascia Keyboard Overlay

Wedges

Pin Camera

Hammers

Crowbars

Angle Grinder

Eavesdropping

Physical Attacks

- High loses in assets - Increased Population Safety hazard - Biggest impact on ATM business - Low skills required – fast spreading - Effective solutions available Logic & Fraud are elusive threats that requires continuous monitoring.

Removing the threat of physical attacks, enables you to focus on

eliminating other potential risks on your estate.

What is the best ATM protection concept against physical attacks

?

? ?

RE

WA

RD

S

RIS

KS

What is the best ATM protection concept against physical attacks ?

Motivation is derived from the word motive which is defined as a need that requires satisfaction

Need is a psychological feature that arouses an organism to Action toward a Goal, giving purpose and direction to behavior.

Need Action Goal Satisfaction

Motivation is created when an individual having a specific need is able to foresee the actions required to achieve the goal that can provide the intended satisfaction.



Protection concept is based on increasing the difficulty of the

Actions required to achieve the Goal by:

- Adding physical barriers;

- Reducing the time available for the Actions using alarms;

- Increase the criminal exposure to arrest;

- Require additional resources to successfully perform the

actions.

Typical ATM protection solutions



With the proper technology, IBNS can deliver the best

and more consistent results in criminality Deterrence

because it can irreversibly spoil the Goal, WHATEVER

the actions performed by criminals, depriving them

from Satisfaction.

Eliminating the goals is the key to break the motivation

cycle.

IBNS – Intelligent Banknote Neutralisation Systems


Making criminals believe that, whatever they do

or try, there will be no reward from attacking

ATM’s, as it is the ultimate deterrent against

physical attacks.

IBNS is simply the best solution available today.


What is the best ATM protection concept against physical attacks ? Several market case studies, industry associations

and law enforcement authorities reports confirm

the effectiveness of Intelligent Banknote

Neutralisation Systems (IBNS) as a criminal

deterrence.

?

? Why some markets have negative perceptions on IBNS technology

?

Why some markets have negative perceptions on IBNS technology

? The IBNS concept was invented nearly 40 years ago, in the time of the first computers, mobile phones and even the iconic Walkman cassette player! The concept was so innovative that it was far ahead of it’s time! For a long time the technology was simply not up to the concept, neither in reliability, effectiveness or affordability. But technology evolves over time, and so did the IBNS technology.

Today, IBNS technology must deliver: o Extreme reliability o Fail proof operation o Low maintenance o Complete attack protection o Immunity to human mistakes o End-to-end operation o H&S compliancy o Multivendor ATM & CRM o Affordability

Nowadays, any negative experience on IBNS use can only be the result of using underdeveloped or outdated IBNS technology.

Why some markets have negative perceptions on IBNS technology

?

Can IBNS by itself provide complete ATM protection against all Physical Threats ?

?

From 2011:

> 11 000 ATM’s Protected

> 50 000 Cassettes

in 20 different countries

Smartstain Case Study:


Lab tested and approved: > 30 x explosion tests in lab environments > 100 x cassette activations > 250.000 test stained notes Multiple independent certification bodies Average internal tests per year: > 4 x explosion tests > 80 x cassettes activations > 200.000 notes stained



Field Proven:

48 actual attacks reported over 8 years

Multiple Modus Operandi

> 50% cases are Explosions, Gas or Solid

Multiple ATM’s and safe models


100% Success Rate


Last Reported Attack: Malaysia, 11 August 2019

Solid Explosive Modus Operandi

Evidences confirm all cassettes neutralized

Maximum deterrence effect achieved


Conclusions:

• Effective against all type of attacks

• 100% success rate over 8 years

• Very low attacks / protected ATM ratio

• Very high deterrence effect


If IBNS is such a good deterrent, can’t we just apply fake IBNS stickers to all ATM’s ?

?

CREDIBILITY

Credibility is the quality of being convincing or believable

Even with IBNS, criminals will eventually put the system to the test

and try their luck.

A protection strategy based on Bluff is doomed to fail.

? Credibility is a KEY factor on crime fighting success

If IBNS is such a good deterrent, can’t we just apply fake IBNS stickers to all ATM’s

? How to Set-Up Cost Effective protection with IBNS technology ?

€€€

1- Focus on the objectives

o Define your investment goals

o Don’t design the technical solution yourself

o Commit your IBNS vendor to offer you the best solution to achieve your objectives

How to Set-Up Cost Effective protection with IBNS technology ?

2- Build an accurate and trustable business case

o Calculate your TOC o Purchase o Deployment o Service

o Calculate your savings o ATM configuration o Infrastructures o Purchase / Service other unnecessary

equipment o Insurance premium reductions o Attack loses reduction

o Consider new ATM locations supported by IBNS



3- Take cover on unexpected running costs

o Make sure your IBNS provider is liable for o False positives

o Potential collateral damages

o All technical fails

o Human errors

o Demand civil liability insurance

o Consider warranty extension option for complete worry free operation

o IBNS as service can also be a good option




4- Carefully plan your IBNS deployment

o Prioritize high risk locations

o 20% effort can solve you 80% of the problems

o Carefully schedule IBNS deployment to save on maintenance costs on other unnecessary equipment





5- Maximize the results of your investment

o Invest on Media campaigns o IBNS warning signs o Social Media o TV news

o Distinguish your ATM’s from others

o Consider DNA traceability to assist Police

o Consider available Track & Recover option


4- Carefully plan your IBNS deployment




Very Important: “Never do This !” list

Never ever use fake IBNS warning

Never use only partial IBNS protection

Don’t run ineffective obsolete IBNS systems

Final Message

Physical attacks are a huge threat for ATM industry.

But the solution is available, proven and within your reach.

We believe that in the future IBNS will be a standard part of

any ATM, as standard as the safe itself, and physical attacks

will become something of the past.

Our team work hard to make it happen.

Today, IBNS technology is definitely ready for it.

Grazie

Obrigado

Gracias

Danke

Merci

Thank You

The End

Rui Pereira

R&D Team Leader

+351967124141

[email protected]

Marcel Bosland

Business Dev. Manager

+351967124141

[email protected] Booth #03

atm physical attacks how to set up cost effective criminal ... · walkman cassette player! the...

Documents