160 likes | 186 Views
Explore the evolution of cyber crime and learn strategic tools and defense strategies to combat e-crime in the rapidly evolving digital market. Topics include multi-layered defense strategies, essential tools for the future, and the evolution of organized crime syndicates. Presented by Suncorp.
E N D
Combating e-Crime in a rapidly evolving digital market Annual Future of Security in Banking & Financial Services March 2011
Combating e-Crime AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS • The evolution of cyber crime – a Suncorp perspective • Building an enterprise financial crime solution • Multi-layered defence strategies • Essential tools and the future • Questions
Cyber Crime Evolution AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS Cyber Crime (n): Offences against computers and computer systems and technology enabled crime Source: House Standing Committee on Communications 2010
Cyber Crime Evolution AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS OLD WORLD NEW WORLD • Hacking • Denial of Service Attacks • Internet Banking Fraud • Hacking • Denial of Service Attacks • Internet Banking Fraud • Card Skimming • Terminal Tampering • Wire Intercepts • Phone Banking • Vishing • Porting
Cyber Crime Evolution AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS Multi-layered organised crime syndicates RISK Evolution of gangs Individual hackers 1990 2000 2010 2020 TIME
Enterprise Financial Crime Solution AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS • We wanted to produce a system which provided detection capability across: • AML/CTF (including sanction monitoring) • Internet Banking Fraud • Phone Banking Fraud • Cheque Fraud • Branch Transaction Fraud • Merchant Fraudand • Internal Fraud • Near real time coverage • Leverage data elements across multiple channels • Increase amount of data elements • Deliver single platform efficiencies • Increase data history holdings to improve analytical effectiveness • Move away from Black Box reliance to fluid analytics
Enterprise Financial Crime Solution AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS Fraud management for Suncorp – a hands on approach • Seized control back from Business Technology. • Uplift in effectiveness • Control timeliness • Employed analysts who have the skills and drive to pro-actively detect fraud. • Own, know and understand our data.
Multi-layered Defence Strategies AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS High Tech Crime Operations / AusCert Strategic Interbank e-Crime Operational 3rd Party Intelligence Sharing Collaborative
Multi-layered Detection Strategies AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS The Irony! Classic e-fraud is the easiest to detect of all frauds TXN • Data is Key • Transaction attributes • IP attributes • Packet Information • Receiver Information
Multi-layered Detection strategies AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS • Why is it ironic? • Internet Banking Fraud normally contains the following traits: • The transfer is from a different IP address • The transfer is going into a new account • The transfer is often larger than normal • What’s beginning to develop? • 2 Factor bypass • Proxying through customers PC
Multi-layered Detection strategies AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS • Current multi-layered detection strategies • Accumulative risk scoring on below • The transfer is from a different IP address • The transfer is going into a new account • The transfer is often larger than normal • Strategies to combat recent developments • Reliance on the Profile (normality) • Packet comparison • Industry IP Sharing
What tools are essential for the future AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS/FUTURE Main Threats to consider
What tools are essential for the future AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS/FUTURE Multi-layered organised crime syndicates RISK Evolution of gangs Individual hackers Socially engineered Cybercrime 1990 2000 2010 2020 TIME
Essential tools for the future AGENDA EVOLUTION ENTERPRISE STRATEGIES TOOLS/FUTURE Fluid analytics which can model on the fly Real time intelligence sharing Real Time Fraud Intervention Intervention in only high-risk transactions Detect more complex fraud indicators such as authentication bypass
E-crime in a rapidly evolving digital market Questions?