Agenda Day 1 Thursday 11th June 2015 08:00 - 09:00 Welcome Coffee and Registration 09:00 - 10:45 Day 1 Opening Remarks
Speaker: Conference Chairman, Úna Dillon, EAST Development Director
Law Enforcement Agency Keynote Presentation
Europol will open the event with a keynote presentation outlining the proven benefits of coordinated efforts to combat ATM fraud and organised crime.
Speaker: Grzegorz Mazurkiewicz, Operations, European Cybercrime Centre, Europol
European ATM Crime Overview latest update from EAST
EAST Executive Director Lachlan Gunn will give a short overview of EAST and the groups activities, and present highlights from the latest European ATM Crime Report covering the full year 2014.
Speaker: Lachlan Gunn, Executive Director, European ATM Security Team (EAST)
EAST Expert Group on ATM Fraud (EGAF) Briefing
This session will detail findings, trends and guidelines identified by the EAST Expert Group on ATM Fraud (EGAF). EGAF is the EAST specialist expert forum for discussion of ATM related fraud trends, fraud methodologies and counter-measures.
Speaker: Otto de Jong, Fraud & Security Consultant, ING Domestic Bank (Netherlands) - Chair of EGAF
10:45 - 11:15 Networking Break 11:15 - 12:20 "Testing Anti-Skimming Technology LIVE: Part 1"
This 2-part session will demonstrate LIVE the process of reproducing a skimmer as well as showcase how 3D printing is being used as a tool to develop a process for reliable, reproducible, evidence-based validation of the effectiveness of anti-skimming technologies. Read more
Speaker: Dave OReilly, Chief Technologist, FTR Solutions
"Security Best Practices for MChip Transactions"
An overview of the safe, simple and smart security solution set helps MasterCard issuers and acquirers to prevent, detect and mitigate attacks and compromises.
Speaker: Fernando Lourenço, Business Leader - Payment System Integrity | Transaction Security, MasterCard Worldwide12:20 - 13:30 Lunch 13:30 - 15:00 "Operation Sandpiper, a Collaborative Approach: Case Study on Private Sector & Law Enforcement Cooperation"
This joint presentation from Royal Bank of Scotland and the Dedicated Card and Payment Crime Unit (DCPCU), a special police unit comprised of police officers who have been appointed from the City of London Police as well as the Metropolitan Police Services, explains how effective coordination and information sharing between law enforcement and industry succeeded in A Case Study on “Project Sandpiper” will be presented. The successful project, an exercise in Private Sector & Law Enforcement cooperation, was initiated by UK authorities and headed by the Dedicated Card and Payment Crime Unit (DCPCU). Read more
Speakers: Detective Sergeant Russ CHINN, SCO7 Organised Crime Command - DCPCU, Metropolitan Police & Ben Birtwistle - Manager, Customer Outcomes & Fraud - ATM Operations
"Payment Fraud Trends in Ukraine 2014: new threats Cyber Skimming and Jackpotting in ATMs"
This session will highlight issues identified in Ukraine and neighbouring countries, trends in skimming and recent developments in Jackpotting attacks. Read more
Speaker: Olesya Danylchenko - Deputy Director, Head of Payment Instruments and Credits, Security Forum - Ukrainian Interbank Payment Systems Members Association "EMA"
"Demo: Compromising ATMs with & without Whitelisting"
ATM compromise through the use of malicious software is on the increase across the world. At EAST FCS 2015 a demonstration will show how a Windows ATM platform can be compromised through malware infection – this will be done using advanced techniques that evade anti-virus and whitelisting protection. A virtual ATM machine running on Windows XP and Windows 7, with an XFS layer both with and without application whitelisting, will be infected using known ATM malware. Read more
Speaker: Alexandru Mihai Gherman, Principal Security Consultant. FortConsult
15:00 - 15:30 Coffee Break and Networking 15:30 - 18:00 "Case Study & Live Demo: Pen-testing, Current & Future Exploits in ATM Networks"
A Case Study on work carried out to secure a national ATM Network will be presented. This will include a live demonstration by ethical hacking experts using innovative techniques and exploits to conduct pen-testing. The demo will cover issues identified and the new strategy being implemented to combat emerging logical threats to ATM systems at a national level in a specific country. Read more
Speakers: Rafael Revert, CTO, Cyttek International & Lucas Allen, CEO, LiquidNexxus
"PCI Security Standards Council, PCI DSS 3.1 Update & Impact on ATM Security"
This presentation by the PCI SSC International Director, Jeremy King, covers the role of the PCI SSC and various standards which impact or affect ATM security. Some key topics will include: The recent release of PCI DSS v3.1, Anti-Skimming Recommendations, ATM Security Guidelines, the Impact of Requirement 9.9. on inspection of card entry devices for tampering and much much more.
Speaker: Jeremy King, International Director PCI SSC
Drinks Reception: Drinks reception hosted on the terrace of the Kurhaus Hotel overlooking the seaside.
| Agenda Day 2 | Friday 12th June 2015 |
|---|---|
| 08:00 - 09:00 | Welcome Coffee and Registration |
| 09:00 - 10:15 | Day 2 Opening Remarks & Review of Day 1 Speaker: Conference Chairman, Úna Dillon, EAST Development Director "Combating High-Tech and Financial Crime in the U.S." The US Secret Services ECTF and Electronic Crimes Working Group initiatives prioritize investigative cases that involve electronic crimes. These initiatives provide necessary support and resources to field investigations that meet any one of the following criteria: Significant economic or community impact; Participation of organized criminal groups involving multiple districts or transnational organizations; Use of schemes involving new technology. In this presentation the USSS will share challenges and trends in their work in combating Financial Crime. Read more Speaker: Jeffrey Dant, United States Secret Service (USSS) "Financial Malware and the Associated Attacks" This presentation will cover the history of financial malware and the attacks launched from them, from humble beginnings in 2004, to the present day sophisticated attacks such as Carbanak, and will focus on drivers that forced or caused the sector to evolve. A very relevant presentation in the light of recent cases involving multiple attack vectors Speaker: Maurits Lucas, Director, Fox Intell |
| 10:15 - 10:45 | Networking Break |
| 10:45 - 12:45 | "Overview from EAST Expert Group on ATM Physical Attacks (EGAP)" This session will detail findings, trends and guidelines identified by the EAST Expert Group on ATM Physical Attacks (EGAP). EGAP is the EAST specialist expert forum for discussion of ATM related physical attack trends, attack methodologies and counter-measures, threat protection, and for the provision of regularly updated lists of known counter-measures. Speaker: Graham Mott, Head of Development, LINK - Chair of EGAP "ING: combating ATM physical attacks" This presentation will focus on INGs efforts to combat a strain of physical attacks on their ATMS. ING will present an overview of the chancing modus operandi of the attackers and which countermeasures have been taken regarding these physical attacks. Read more Speaker: Job Galesloot, Manager Security Branches, ING DB NL "Technical Overview of Payment Card Fraud at Terminals (ATM, POS, Petrol Pumps)" This session will introduce the latest technical trends in Payment Card Fraud investigated by the Forensic Science Institute of the French Gendarmerie (IRCGN). The presentation will showcase examples of ATM Skimmers being detected as well as examples of sophisticated POS and Petrol Station Terminal attacks. The session will also cover specific proactive security techniques developed to track and locate fraudsters. Speaker: Captain Thomas Souvignet, Criminal Research Institute of the National Gendarmerie (IRCGN) "Testing Anti-Skimming Technology LIVE Part 2" Part 2 of this session will demonstrate the final reproduced skimmer using a 3D printer. Read more Speaker: Dave OReilly, Chief Technologist, FTR Solutions Closing Remarks Speaker: Conference Chairman, Úna Dillon, EAST Development Director |
