How To Sign Oklahoma Banking Form

How can i industry sign banking arkansas presentation secure

thank you so much good afternoon ladies and gentlemen welcome to the session one of my favorite sessions to facilitate both via webinar and in person how crooks are getting around our online banking authentication or online banking security and then bankers online also asked me to draw in some additional information in regards to emerging technology some of the things we're finding as more successful forms of security than others and then some very important provisions for contracts so what I've done is I've separated this presentation into four sections what I'm going to propose is will go through section 1 and 2 and at that time take that that five-minute break and do some question and answer there because i do find the first half of the program tends to generate the largest number of questions and if you don't get the question in during the break time there don't worry about it go ahead and submit it and again we'll try to leave some time at the conclusion of the presentation as well to do some questions there so you may have noticed these program I have roughly 35 slides or so so if you were thinking ah yay we're going to get out of this in an hour for those of you who have not had the pleasure of meeting in the past I can talk for about two days on the subject on 30 slides or less so we will take about the full two hours but I do again want to give you plenty of time for Q&A but I will get you out of here after two hours because I think there's only so much the human mind can take there's one other little tip that I want to point out about this program well I realize you're all wearing your bankers hats today I do want to give you a little bit of takeaway for you as a consumer as well so as we start going into the thought of those questions don't feel so restrictive that you have to keep it just to the bank or hat that you wear if you have questions from a personal nature I may do those offline where you retrieve them later but I will help you as best I can because I do always want to make sure that all of us as users are as secure as possible all right so let's dive into this presentation I do understand that you are should some of my bio information with made available before the program but there's my email contact information as well if you need to talk one-on-one and you have some more common financial information that you want to share alright so I think it's really important to set the landscape so this is the section i call this just in this is this is the really hot stuff of what's going on out there and i think one of the first things we need to cover when we're talking about how crooks are bypassing security cyber crime is not just a technology problem the human element is there as well and i want to introduce you to a little bit of that this is a little bit older survey but i really don't think that the percentages will have changed drastically in the last year ish this was conducted by Ponemon Institute and those of you familiar with the Ponemon Institute they try to take a very academic view of whatever topic it is that they are doing surveys or research on so they don't have that you know kind of biased aspect that sometimes you will find in some of the vendor papers so in 2011 they consulted with a number of per se sorry number of consumers across the United States and said now be honest consumer this is completely anonymous would you give up your personal information including your bank account information in an email because you were told you won a lottery or sweepstakes and actually fifty-five percent of the consumers surveyed said sure I would give up personal information including my banking information if I were told that i won a lottery or some kind of sizable sweepstakes and fifty-three percent admitted they would give up personal information friant for a free antivirus software and I just have to throw that last one in there forty-eight percent admit they give it up for free movie tickets so I think that when we start thinking about how criminals are bypassing we need to remember the old social engineering aspect because it is still very much alive and it does happen on a regular basis I realize that when we have our banker hat on and we hear of an account takeover those types of things we are very quick to jump to the concept of there has to be malware involved and please understand that in some cases that's probably not going to be the case and actually a verizon publish their report with the Secret Service last year and found that only forty percent of the cases that they investigated forty-eight percent were malware related breaches or account takeovers and the remainder of it was prominently that social engineering so pretending to be a bank and the criminal gaining the information of the credentials that way does they'll happen and so if you have consumers that have fallen victim for something these are the types of questions typically when I'm talking to consumer groups that I would ask you have you fallen victim to someone claiming won a sweepstakes etcetera and a lot of times particularly on the consumer side you will find that their accounts were in fact compromised because they gave the information up alright so some other things that you know really if you subscribe to any of the Google Alerts any of the other alert systems that are out there that you can keyword it I monitoring cyber crimes and I'm monitoring all news feeds related to G dot and so obviously there's a lot of alerts that hit my inbox every day one of the biggest ones recently was this Sam house versus cyberbunker and there's nothing so overly creatively special about this except for the fact that it was so enormous that it actually slowed down the internet in North America and Europe for three days so if the last month you noticed a extreme lacking in your internet service it wasn't probably your provider but in fact the reaction to the extremely sizeable detox attack that one party launched against another if you are following this story there was an arrest made it was a Dutch man that was arrested it is home insane that they believe was part of this I'm also seeing daily reports Jesus an account takeover and we're going to talk a little bit more about that in just a moment I want to emphasize on on the distributed denial of service that's what the DDoS dians for distributed denial of service frequently is a financial institution of ink is a victim of a DDoS attack you really need to have the hat on of what else is happening because in most cases that I'm privy to the D das this mass flood of traffic aimed at your online banking platform which crashes it is actually to hide the fact that account takeover of probably a substantial size already occurred so they're using one form of computer crime in order to mask another one so if you think about this you know a DJ attack I the cybercriminal have access to millions of computers across the world via the malware that I've been distributing for the last few years not really this is all pretend ladies and gentlemen but they gaining access to those computers I can control them and then I could turn all of that traffic against your bank's online banking site and when you think about if your online banking site is used to supporting 100,000 users logging in at any one time and all of a sudden three million what that naturally is going to do to that platform so what that does in effect event is locked about your legitimate customers as well so they cannot get in and see that they are missing 750,000 a million the last case that I'm aware of with a million three cyber crimes are targeting consumers and businesses I really encourage when you're talking account takeover which are going to talk about later when we get into the SS IEC portion of this program is good business educate not just your business appliance I can't take over but also your consumers and the FF site FFIEC guidance really mandates that so when you're doing that I very strongly encourage you don't call it a corporate account taker that is in fact what it was eight years ago it's not that today they are targeting consumers just as much as they are businesses we see the more sophisticated groups going after the businesses because the financial industry is making it harder and harder for the criminals to get in so you won't see some of the low-level thug gangs trying to access business accounts predominantly anymore they're targeting the consumers because they know most consumers are probably running a dirty computer they don't have sophisticated security they don't understand some of the things that they need to be doing to protect access to their online banking I continue to see reports are the financial institutions probably right now banks but for a while there was credit unions that the corporate client was suing over the losses related to an account takeover that the losses could not be pulled back even if it was on part of the business where it took them a week to respond and to report the incident they turned around and then filed suit against