News

ATM Security Association releases progress report

Working groups on skimming, cassette security, software security and encryption are identifying threats and developing best practices for countering them.

September 17, 2015

The ATM Security Association has released an update on progress by working groups assigned to a number of areas for ATM security improvement.

Members have established four working groups within the cross-industry association, which was officially launched this year as a repository for information about ATM security threats and countermeasures.

Following are reports submitted by the groups at an association board meeting in mid-September:

• The working group on skimming is drafting a white paper on ATM card-compromise techniques (e.g., card skimming, card shimming, eavesdropping, card trapping) and countermeasures. The paper will be released and shared with relevant industry groups upon completion, which is expected well before year-end.
• The working group on cassette securityis collecting data on typical risk scenarios for various cassette types. By the end of the year, the group expects to define specific risks and best practices for countering them, which will be described in white papers and industry checklists.
• Working groups on software securityandencryptionare currently synchronizing and prioritizing a variety of topics. The software security group is focusing on safeguarding ATMs against software attacks such as network sniffing.

The encryption group is examining options for enhancing ATM security through the use of cryptology — for example, by reviewing possible improvements for cryptographic key management or secure components including EPPs, card readers and cash dispensers. Details on specific subject areas and projects will be announced at a later date, the association said.