Is Your Online Bank Really Secure?

Transcription

1 Is Your Online Bank Really Secure? Zoltan Szalai / ebanking Solution Manager April 25, 2013

2 2

3 Gemalto for You ONE THIRD OF THE WORLD S POPULATION USE OUR SOLUTIONS EVERYDAY BANKS & RETAIL TELECOM TRANSPORT GOVERNMENT ENTERPRISE 3

4 About ebanking MILLION DEVICES MILLION ADVANCED DEVICES About Gemalto Over 2 BILLION in Revenue in MILLION Software and Value Added Services 200 EMPLOYEES BILLION Intelligent Cards Produced and Personalized on a Yearly Basis Business Overview % MILLION IN REVENUE 2009 MILLION IN REVENUE 2012 EXPECTED ANNUAL GROWTH 14 R&D Centers 1,400 Scientists 15 Production Sites 28 Presonalization Centers 74 Sales & Marketing Offices 10,000 + Employees 100 Nationalities 43 Countries 4

5 Gemalto s Position 2013 MAGIC QUADRANT FOR STRONG AUTHENTICATION FROM GARTNER 5 As of March, 2013

6 Gemalto s Position ICB - TECHNOLOGY SOFTWARE SECTOR TOP 20 COMPANIES Company Name Country Revenue ( bn) 1 MICROSOFT UNITED STATES ORACLE UNITED STATES SAP GERMANY CATAMARAN UNITED STATES SYMANTEC UNITED STATES VMWARE UNITED STATES CA UNITED STATES ADOBE SYSTEMS UNITED STATES INTUIT UNITED STATES IT HOLDINGS JAPAN INVENSYS UK AMDOCS UK SALESFORCE.COM UNITED STATES GEMALTO NETHERLANDS CERNER UNITED STATES As at March 27, 2013

7 Gemalto ebanking References 200+ BANKS 7

8 Frauds & Mitigation 8

9 Attacks are Evolving ebanking FRAUD IS GETTING MORE AND MORE SOPHISTICATED MAN-IN- THE-BROWSER SHOULDER SURFING PHISHING PHARMING MAN-IN- THE-MIDDLE SOCIAL ENGINEERING WHALING CROSS CHANNEL ATTACKS RELAY ATTACK CONTRACTUAL FRAUD ID THEFT KEY/SCREEN LOGGING 9

10 Phishing Attack 2) Enters secure information on fake internet bank site Fake Server Victim 1) Sends fake security with fake link 3) Obtains account information 4) Using obtained account information on real internet bank site Bank Server 10 are familiar with phishing Low to very low knowledge of other attacks Source: RSA Online Fraud Report

11 Man-in-the-Middle Attack Victim Bank Server Malware Waits for Transaction and Modifies Details!!! 11

12 Man-in-the-Browser Attack Website Seen by the Customer Website Seen by the Bank Malware Inside the Browser 12 Malware Changes Balance Information Malware Changes Transaction Details

13 Attacks and Mitigation USER-FRIENDLY MITIGATION OF ALL CURRENT AND FUTURE THREATS TRANSACTION VERIFICATION TRANSACTION DATA SIGNING CONTEXTUAL SIGNING CHALLENGE / RESPONSE ONE TIME PASSWORDS MAN-IN- THE-BROWSER STATIC PASSWORDS SHOULDER SURFING PHISHING PHARMING MAN-IN- THE-MIDDLE SOCIAL ENGINEERING WHALING CROSS CHANNEL ATTACKS RELAY ATTACK CONTRACTUAL FRAUD ID THEFT KEY/SCREEN LOGGING 13

14 efrauds in the Region 14

15 Ezio Solution 15

16 Gemalto Ezio Suite STRONG E-BANKING AUTHENTICATION ARCHITECTED FOR CHOICE Ezio Suite is the market s most versatile and easy-to-implement ebanking security solution with a proven track-record of 100+ large-scale roll-outs. STANDARD COMPLIANT INCL. OATH, CAP/EMV, PKI ONE SERVER MULTIPLE CHANNELS ALL EZIO DEVICES WORK IN PARALLEL Appliance Delivery Token- Agnostic 70m DELIVERED DEVICES 200+ BANKS 16

17 Introduction to New Ezio Server Pre-Hardened All-in-One Box Appliance Providing Multi-Factor Authentication Used by 30+ Banks & Millions of Users R&D and Produced in Singapore 17

18 Advantages of Ezio Server Multi-Million User Deployment Token Agnostic Authentication Brokering Thousand Transactions per Second Multi-Token Support per User End-to-End Encryption of Passwords Supports Global Standards 18

19 Ezio Devices EZIO EDGE EZIO CLUB EZIO THIN EZIO SHIELD PRO EZIO SHIELD TALK EZIO PC USB-TR EZIO PKI CARD EZIO PLUG & SIGN EZIO CLASSIC CLIENT EZIO bysms EZIO MOBILE SDK EZIO MOBILE TOKEN EZIO LAVA EZIO PICO EZIO oncard EZIO oncard PAD EZIO SERVER EZIO TOOLKIT 19

20 Evolution is Leading to Mobile 20

21 Day-to-Day ebanking is Partially Transiting to Mobile Find Nearest Branch / ATM Block Lost/Stolen Card Check Balance View Transaction History Make Money Transfer 21

22 Ezio Mobile Solutions Access Bank with Web Browser Access Bank with Native Application Protected by Mobile Token Protected by Mobile SDK 22

23 Ezio Mobile SDK OTP Computation Smartphone Support Secure Storage Secure Personalization Security Expertise Device Fingerprint Easy to Integrate API Future Proof 23

24 Ezio Mobile Token OTP Computation Smartphone Support Customizable Based on Ezio SDK 24

25 Summary 25

26 Why EZIO TM from Gemalto? Global Presence Local Touch All-in-One Physical Appliance Wide Range of Security Devices Most Secure Mobile Solution Available Today 26

27 Thank You! Zoltan Szalai / ebanking Solution Manager April 25, 2013