Technology
THE FOUR MOST PRESSING SECURITY ISSUES 2016 WITNESSED
THE FOUR MOST PRESSING SECURITY ISSUES 2016 WITNESSED
Published by Gbaf News
Posted on December 24, 2016
Global Banking and Finance Review
Company
Published by Gbaf News
Posted on December 24, 2016
By David Poole, Head of Growth, MYPINPAD
Each year sees seemingly unprecedented technological advancements coming to market and 2016 was no different. It was a year defined, first and foremost, by the quest for new and dynamic user experiences. Not only did we see new augmented and virtual reality products, the Internet of Things saw dynamic new M2M technology such as smart cars and home apps.
David Poole
In the background, though, security continues to be vitally important. While not as headline-grabbing as the latest gadget or IoT labour saving device, security is critical in keeping the technology we use safe and reliable.
Throughout 2016, security issues have been at the heart of our fintech industry. Below, we examine four of the most pressing ones.
According to the Identity Theft Resource Centre, there were 522 reported breaches by the middle of July this year, exposing over 13 million records.[1]Worryingly, the likelihood of a material data breach involving 10,000 lost or stolen records in the next 24 months has risen to 26%.[2]
Not only have data breaches become more frequent, but their impact has become greater. Once a data breach occurs the consequences for the affected organisation can be devastating. IBM’s eleventh annual Cost of a Data Breach Study revealed that the average consolidated total cost of a data breach for a company for 2016 is $4 million.[3]
Data breaches will remain a part of digital business life and we can expect to see more organisations in 2017 implementing more preventive security methods, as well as new technologies being developed and implemented for this purpose.
Many companies will focus on employing stronger and multi-layered authentication, as encouraged by the Second Payments Directive (PSD2), which will also mean that even if they face some inevitable breaches, access to accounts will be nullified as the stolen partial information won’t be enough to be usable.
Last year, Aité Group reported that US credit card fraud had increased 100% from just seven years ago. The study identified point-of-sale and rising card-not-present (CNP) fraud as contributing factors; which now represents 45% of total US card fraud.[4]
The same trend is true for the UK. Figures from Financial Fraud Action UK show that fraud has been soaring non-stop since 2006, and this figure is growing each year. In the first half of 2016 fraud had risen by 25% and card fraud, which includes card-not-present fraud, was up by 31%.
As e-commerce continues to grow, so too will CNP fraud.[6]Despite this, many retailers and banks are holding back on tightening their security, fearing fallout from consumers rejecting friction in their checkout experience. Yet 2017 will see merchants realising the premium that consumers place on security and their willingness to sacrifice a little convenience to gain a lot of security. The value of a brand can be enhanced by getting the security experience right. So more and more companies will continue to implement two-factor authentication, as Google, Apple, Paypal, Amazon and most social media did in 2016.[7]
Apple Touch ID triggered a new biometrics security revolution, to the point where it is forecasted that by 2021, 99% of US smartphones will be biometrics-enabled.[8]
2016 saw business explore biometrics as never before yet many are still sceptical regarding storing and encryption of biological data.
Even though it is much harder for hackers to access and use, if accessed, it is extremely valuable, since biological data can’t be changed or replaced in the event of a breach. Yet the power and simplicity of biometrics will surely see further adoption in 2017.
However, biometrics on their own, like all security methods, are not infallible. Even if sensors get stronger against fake fingerprint attacks and the technology is refined, if biometrics are to start making headway as a secure authentication technology, the technology will have to be coupled with other forms of authentication, such as password or PIN.
Machine learning is a branch of artificial intelligence (AI) study that concentrates on algorithms which enable computers to “learn” without being given specific programming. Being exposed to new data enables the computer to grow, change, develop and solve problems independently of new programming.
By analysing historical transaction data, machine learning is increasingly being used to detect fraudulent payment behaviour. While it takes one person about 5 minutes to check just one transaction, a machine can check larger amounts of data in nanoseconds, saving time and money and making the analysis feasible in real time to prevent an attack.[9]
The possibilities for machine learning in the field of ID and verification are considerable. Taking, as an example, the mobile phone, we each have our own quirks whilst using our device. We will hold the device in a certain way, enter keystrokes in a specific manner and have countless other characteristics that can be “learned”.
Machine learning is still in its infancy and needs to be developed in real life use cases but it could allow the inclusion of an additional layer of security to ID&V processes. If taken forward, not only would your device recognise your passcode or biometric information, it would also recognise if this information has been entered in a recognised fashion. We expect to see further developments on how AI and machine learning could be used to satisfy security needs.
Conclusion
Overall, in 2017 we expect to see:
[1]http://www.crn.com/slide-shows/security/300081491/the-10-biggest-data-breaches-of-2016-so-far.htm
[2]https://securityintelligence.com/cost-of-a-data-breach-2016/
[3]https://securityintelligence.com/cost-of-a-data-breach-2016/
[4]https://www.emc.com/collateral/white-papers/card-not-present-fraud-post-emv-env-wp.pdf
[5]https://www.financialfraudaction.org.uk/fraudfacts16/
[6]https://www.javelinstrategy.com/blog/2015/06/02/a-hole-in-the-balloon-analogy-the-complex-evolution-of-card-fraud-in-the-us/
[7]http://www.pcmag.com/article2/0,2817,2456400,00.asp
[8]http://www.businessinsider.com/the-biometrics-report-2016-7
[9]https://blog.markgrowth.com/fighting-fraud-with-machine-learning-ecfbd2239fb9#.dqtvpn2hw
By David Poole, Head of Growth, MYPINPAD
Each year sees seemingly unprecedented technological advancements coming to market and 2016 was no different. It was a year defined, first and foremost, by the quest for new and dynamic user experiences. Not only did we see new augmented and virtual reality products, the Internet of Things saw dynamic new M2M technology such as smart cars and home apps.
David Poole
In the background, though, security continues to be vitally important. While not as headline-grabbing as the latest gadget or IoT labour saving device, security is critical in keeping the technology we use safe and reliable.
Throughout 2016, security issues have been at the heart of our fintech industry. Below, we examine four of the most pressing ones.
According to the Identity Theft Resource Centre, there were 522 reported breaches by the middle of July this year, exposing over 13 million records.[1]Worryingly, the likelihood of a material data breach involving 10,000 lost or stolen records in the next 24 months has risen to 26%.[2]
Not only have data breaches become more frequent, but their impact has become greater. Once a data breach occurs the consequences for the affected organisation can be devastating. IBM’s eleventh annual Cost of a Data Breach Study revealed that the average consolidated total cost of a data breach for a company for 2016 is $4 million.[3]
Data breaches will remain a part of digital business life and we can expect to see more organisations in 2017 implementing more preventive security methods, as well as new technologies being developed and implemented for this purpose.
Many companies will focus on employing stronger and multi-layered authentication, as encouraged by the Second Payments Directive (PSD2), which will also mean that even if they face some inevitable breaches, access to accounts will be nullified as the stolen partial information won’t be enough to be usable.
Last year, Aité Group reported that US credit card fraud had increased 100% from just seven years ago. The study identified point-of-sale and rising card-not-present (CNP) fraud as contributing factors; which now represents 45% of total US card fraud.[4]
The same trend is true for the UK. Figures from Financial Fraud Action UK show that fraud has been soaring non-stop since 2006, and this figure is growing each year. In the first half of 2016 fraud had risen by 25% and card fraud, which includes card-not-present fraud, was up by 31%.
As e-commerce continues to grow, so too will CNP fraud.[6]Despite this, many retailers and banks are holding back on tightening their security, fearing fallout from consumers rejecting friction in their checkout experience. Yet 2017 will see merchants realising the premium that consumers place on security and their willingness to sacrifice a little convenience to gain a lot of security. The value of a brand can be enhanced by getting the security experience right. So more and more companies will continue to implement two-factor authentication, as Google, Apple, Paypal, Amazon and most social media did in 2016.[7]
Apple Touch ID triggered a new biometrics security revolution, to the point where it is forecasted that by 2021, 99% of US smartphones will be biometrics-enabled.[8]
2016 saw business explore biometrics as never before yet many are still sceptical regarding storing and encryption of biological data.
Even though it is much harder for hackers to access and use, if accessed, it is extremely valuable, since biological data can’t be changed or replaced in the event of a breach. Yet the power and simplicity of biometrics will surely see further adoption in 2017.
However, biometrics on their own, like all security methods, are not infallible. Even if sensors get stronger against fake fingerprint attacks and the technology is refined, if biometrics are to start making headway as a secure authentication technology, the technology will have to be coupled with other forms of authentication, such as password or PIN.
Machine learning is a branch of artificial intelligence (AI) study that concentrates on algorithms which enable computers to “learn” without being given specific programming. Being exposed to new data enables the computer to grow, change, develop and solve problems independently of new programming.
By analysing historical transaction data, machine learning is increasingly being used to detect fraudulent payment behaviour. While it takes one person about 5 minutes to check just one transaction, a machine can check larger amounts of data in nanoseconds, saving time and money and making the analysis feasible in real time to prevent an attack.[9]
The possibilities for machine learning in the field of ID and verification are considerable. Taking, as an example, the mobile phone, we each have our own quirks whilst using our device. We will hold the device in a certain way, enter keystrokes in a specific manner and have countless other characteristics that can be “learned”.
Machine learning is still in its infancy and needs to be developed in real life use cases but it could allow the inclusion of an additional layer of security to ID&V processes. If taken forward, not only would your device recognise your passcode or biometric information, it would also recognise if this information has been entered in a recognised fashion. We expect to see further developments on how AI and machine learning could be used to satisfy security needs.
Conclusion
Overall, in 2017 we expect to see:
[1]http://www.crn.com/slide-shows/security/300081491/the-10-biggest-data-breaches-of-2016-so-far.htm
[2]https://securityintelligence.com/cost-of-a-data-breach-2016/
[3]https://securityintelligence.com/cost-of-a-data-breach-2016/
[4]https://www.emc.com/collateral/white-papers/card-not-present-fraud-post-emv-env-wp.pdf
[5]https://www.financialfraudaction.org.uk/fraudfacts16/
[6]https://www.javelinstrategy.com/blog/2015/06/02/a-hole-in-the-balloon-analogy-the-complex-evolution-of-card-fraud-in-the-us/
[7]http://www.pcmag.com/article2/0,2817,2456400,00.asp
[8]http://www.businessinsider.com/the-biometrics-report-2016-7
[9]https://blog.markgrowth.com/fighting-fraud-with-machine-learning-ecfbd2239fb9#.dqtvpn2hw
Explore more articles in the Technology category
