ATM Security

Uvod: Bankomati predstavljajo pomemben in priljubljen kanal za dostop do gotovine. Njihovo število iz leta v leto narašča. Zaradi velikega števila bankomatov različnih standardov varovanja so slednji tarča zlorab. Namen naloge je bil pregledati področje bankomatskega poslovanja z vidika pojavnih oblik zlorab, predstaviti statistiko zlorab, povzeti regulativo in dobre prakse za upravljanje in varovanje bankomatov z namenom potrditve postavljenih predpostavk. Zlorabe na bankomatih: Poznamo različne vrste zlorab bankomatov, v osnovi jih lahko delimo na klasične zlorabe, pri katerih se uporablja neka vrsta fizične sile za odprtje ali uničenje varnostnega vsebnika, medtem ko druga vrsta zlorab izkorišča podatke uporabljenih kartic ali vpliva na delovanje samega bankomata. Statistika škodnih dogodkov zadnjih nekaj let nakazuje upad klasičnih zlorab in porast drugih »logičnih« zlorab. Analiza konkretnih škodnih dogodkov: Predstavili smo štiri dogodke zlorab, ki so se zgodili v Sloveniji. Zakonodaja in standardi: Področje zakonodaje in standardov je za področje bankomatov dokaj generalno. V Zakonu o bančništvu (Zban-2) je poglavje o operativnih tveganjih tisto, ki govori o upravljanju z operativnimi tveganji, kamor spadajo zlorabe bankomatov. Priporočila Zavarovalniškega združenja so pomembna z vidika prenosa tveganj na zavarovalnico. Združenje bank Slovenije (ZBS) v Minimalnih priporočilih za varnost bančnega poslovanja zelo podrobno definira ukrepe za varovanje. Zakon o zasebnem varovanju postavlja pogoje za izvedbo varovanja s strani licenciranih varnostnih podjetij. Vrste bankomatov, lokacije in načini varovanja: Bankomati so različnih vrst in namembnosti, prav tako se med seboj razlikujejo tudi lokacije postavitve bankomatov. Podobno kot pri tipologiji pojavnih oblik zlorab sta tudi zaščita in varovanje deljena na ukrepe pasivne fizične zaščite in druge aktivne tehnične zaščite. Zaključek: Postavljene predpostavke smo v večji meri potrdili. Bankomati so tarča zlorab, klasične oblike slednjih ne naraščajo, v Sloveniji so v upadu. Skimming zlorabe so najštevilčnejše in v porastu, pogosto tujci izvajajo zlorabe v Sloveniji. Trdno smo prepričani, da sistemski pristop in ustrezno varovanje bankomatov zmanjšujeta zlorabe na bankomatih.Introduction: ATMs are one of the primary channels for accessing cash, and their number increases each year. Due to the large number of ATMs with different standards of protection, ATMs present a target for fraud. The purpose of the thesis was to examine various forms of fraud, to present statistics, summarize regulation and best practices for the management and protection of ATMs, with the aim of confirming set presumptions. ATM Abuse: There are different types of ATM abuse, divided as classical abuse, using physical force to open or destroy ATMs. Other types of logical fraud exploits card data, or affects the functioning of the single ATM. Statistics of the last few years indicate a decline in classic abuse and a rise in logical abuse. Analysis of actual loss events: We presented four cases of ATM fraud that took place in Slovenia. Legislation and standards: The scope of the legislation and standards in the field of ATMs is general. In the Banking Act (Zban-2), the section of the operational risks generally mentions the responsibility of banks to adequately manage operational risks which includes abuse of ATMs. Recommendations of insurance association are important in terms of risk transfer to the insurance companies. Banking Association of Slovenia (ZBS) thoroughly defines the measures for the protection in the Minimum requirements for the safety of the banking business, which are also useful for ATMs. Law on private security provides the ground for the implementation of the appropriate means of protection by licensed security companies. Types of ATM, location and methods of protection: ATMs vary in types (models) and purposes. ATM protection consists of passive physical protection and active technical protection. Conclusion: We believe we confirmed most of originally set presumptions. ATMs are targeted by criminals, classic types of fraud are not rising, they are declining in Slovenia. Skimming cases are numerous and increasing. Foreigners often conduct ATM fraud in Slovenia. Lastly, we firmly believe that a systematic approach and an adequate protection reduce ATM fraud