Szalai_Gemalto
- 1. Is Your Online Bank Really Secure? Zoltan Szalai / eBanking Solution Manager April 3, 2013
- 3. Gemalto for You 3 ONE THIRD OF THE WORLD’S POPULATION USE OUR SOLUTIONS EVERYDAY BANKS & RETAIL TELECOM TRANSPORT GOVERNMENT ENTERPRISE eBanking Security
- 4. About Gemalto Over €2 BILLION in Revenue in 2012 €250+ MILLION Software and Value Added Services BILLION Intelligent Cards Produced and Personalized on a Yearly Basis 14 R&D Centers 1,400 Scientists 15 Production Sites 28 Presonalization Centers 74 Sales & Marketing Offices 10,000+ Employees 100 Nationalities 43 Countries Gemalto eBanking The acquisition of Xiring and Todos positioned Gemalto as the leader in the eBanking World. 200+ CUSTOMER BANKS 70 MILLION DEVICES 124 EMPLOYEES 4 eBanking Security
- 5. Gemalto’s Position eBanking Security, March 28, 2013 5 2013 MAGIC QUADRANT FOR STRONG AUTHENTICATION FROM GARTNER
- 6. Gemalto eBanking References 200+ BANKS 6 eBanking Security
- 7. Local References 7 eBanking Security 100,000 SMS OTP 5,000 Tokens 300,000 SMS OTP 1,500 Tokens Local Partner Best eBanking Partner of Gemalto in 2012
- 8. Local References (Extended to Russia) 8 eBanking Security Банк ВТБ Райффайзен Банк Возрождение Банк Московский Индустриальный Банк Other Banks: • Russian Agricultural Bank • LipetsCombank • Bank Primorie • Surgutneftegasprom Bank
- 9. Frauds & Mitigation 9 eBanking Security
- 10. Attacks are Evolving eBANKING FRAUD IS GETTING MORE AND MORE SOPHISTICATED WHALING ID THEFT KEY/SCREEN LOGGING PHARMING PHISHING MAN-IN- THE-MIDDLE MAN-IN- THE-BROWSER SHOULDER SURFING SOCIAL ENGINEERING CROSS CHANNEL ATTACKS CONTRACTUAL FRAUD RELAY ATTACK 10 eBanking Security
- 11. Phishing Attack are familiar with phishing Low to very low knowledge of other attacks Source: RSA Online Fraud Report 11 eBanking Security
- 12. Man-in-the-Middle Attack Victim Bank Server Malware Waits for Transaction!!! 12 eBanking Security
- 13. Man-in-the-Browser Attack Website Seen by the Customer Website Seen by the Bank Malware Changes Transaction Details!!! Malware Inside the Browser 13 eBanking Security
- 14. Attacks and Mitigation TRANSACTION VERIFICATION CONTEXTUAL SIGNING STATIC PASSWORDS TRANSACTION DATA SIGNING ONE TIME PASSWORDS CHALLENGE / RESPONSE WHALING ID THEFT KEY/SCREEN LOGGING PHARMING PHISHING MAN-IN- THE-MIDDLE MAN-IN- THE-BROWSER SHOULDER SURFING SOCIAL ENGINEERING CROSS CHANNEL ATTACKS CONTRACTUAL FRAUD RELAY ATTACK USER-FRIENDLY MITIGATION OF ALL CURRENT AND FUTURE THREATS 14 eBanking Security
- 15. eFrauds in the Region 15 eBanking Security
- 16. Local Situation Cybercrime in Russia: Trends and issues presentation by ESET and Group-IB at CARO in 2011 16 eBanking Security
- 17. Ezio Solution 18 eBanking Security
- 18. Gemalto Ezio Suite Ezio Suite is the market’s most versatile and easy-to-implement eBanking security solution with a proven track-record of 100+ large-scale roll-outs. STRONG E-BANKING AUTHENTICATION ARCHITECTED FOR CHOICE 200+ BANKS ONE SERVER MULTIPLE CHANNELS ALL EZIO DEVICES WORK IN PARALLEL STANDARD COMPLIANT INCL. OATH, CAP/EMV, PKI 70m DELIVERED DEVICES Token- Agnostic Appliance Delivery 19 eBanking Security
- 19. Introduction to Ezio Server A Pre-hardened All-in-one Box Appliance Providing Multi-factor Authentication Field-proven Solution R&D and Produced in Singapore 20 eBanking Security
- 20. Advantages of Ezio Server Multi-million User Deployment Token Agnostic Authentication Brokering Multi-token Support per User End-to-end Encryption of Passwords 21 eBanking Security
- 21. Ezio Devices EZIO SHIELD PRO EZIO EDGE EZIO CLUB EZIO THIN EZIO SERVER EZIO TOOLKIT EZIO onCARD PAD EZIO LAVA EZIO PICO EZIO PC USB-TR EZIO PKI CARD EZIO CLASSIC CLIENT EZIO bySMS EZIO MOBILE SDK EZIO MOBILE TOKEN EZIO onCARD EZIO SHIELD TALK EZIO PLUG & SIGN 22 eBanking Security
- 22. Thank You! Zoltan Szalai / eBanking Solution Manager April 3, 2013