Question

Case Study 3.8: SECURITY PROBLEMS FOR ATM SYSTEMS (Computer Security Principles Practice)

1.Analyze the proposed solutions by independent auditor, Redspin, Inc.

2.Critique and update recommended measures using Cloud architecture and Web applications.

3. Compare the two ATM architectures.

Answer 1

# SECURITY PROBLEMS FOR ATM SYSTEMS

1) Analyze the proposed solutions by the independent auditor, Redspin, Inc.

The security and vulnerability are opposite sides of the same coin, an Automated machine becomes vulnerable due to the weakness of its security. In the case study used a risk management framework to determine traditional and emerging ATM crimes.

Securing the ATM’s infrastructure becomes one of the most challenging tasks. The process requires business, IT and third-party vendors’ involvement. ATM security is a combination of physical security, which is basically how to secure the assets, logical security, or how to protect operating systems from malware, and finally the fraud from skimming attacks.

2) Critique and update the recommended measures using Cloud architecture and Web applications.

For ATM applications, security plays a most important role. When hosting an application in the cloud, however, security should be a high priority. The cloud-based application architecture should make security systemic to the application. Cloud architecture improves customers to use physical cards or devices to withdraw cash from ATMs. It makes able to withdraw cash from an ATM using facial recognition technology and a PIN.

3) Comparison between Two ATM architectures

ATM PROTOCOL ARCHITECTURE	ATM CELL ARCHITECTURE
It involves a range of large components and connections in the ATM network.	It is a short and fixed length block of data
Describe acceptable physical signaling, call control, and upper layer payload formats.	contains a short header with addressing information, followed by the upper layer payload
It is broken into three distinct layers( AAL layer, ATM layer, and Physical layer)	It is 53 octets long, with a 5 octet header, followed by 48 bytes of payload.
AAL provides mechanisms for the transport of different types of data.	Short cells permit to transfer isochronous information with a short delay. The remaining 48 octets are routed through the network to the destination using the circuit.