PKI Appliance from PrimeKey.

1. How To Rob A Bank In The 21st Century
March 2015
Lim Chin Wan

2. Have you ever wanted to rob a bank?

3. DOING IT THE OLD SCHOOL WAY?

4. Hacking A Bank Is
Easy Because We’re
All Humans!

5. I think you should meet
someone…

6. This is Yuri.
In 2012, he and his “anonymous” friends hacked major bank.
In 2013, they hacked credit card company and bought a BMW.

7. Last year, Yuri hit a major telco with the secret keys
provided by a disgruntled employee.
Then Yuri went on a nice 2 month long vacation in the
Caribbean Islands.

8. Banks and telcos all
used “State of the Art”
encryption… yet they
were still hacked!

9. So how does Yuri do it?

10. “Usually, I just find one
disgruntled employee.
Just one.”

12. Don’t Believe Me?
Let’s Play A Game…

13. Can Anyone Tell
Me Who These
People Are?

14. Heidi KlumJessica Alba

15. Britney
Spears

16. Christina
Aguilera

17. Scarlett
Johansson
Kate
Winslet

18. Jon Bon Jovi

19. RATED TOP 20
MOST DANGEROUS
CELEBRITIES IN 2014
BY
McAfee

20. 18.19%

22. Because your users are
your weakest link…

23. They are your customers…
They are your Employees...
They are your vendors…

24. Regular Training…

25. www.securityvitamins.com

28. How can you as a bank
protect your customers and
yourself?

29. CENTAGATE (Centralized
Authentication Gateway) is an on-
demand identification and access
management services that enable
cloud-based services to adopt
strong multi-factor authentication
seamlessly. This is a perfect
solution for enterprise applications
that are now rapidly moving to a
secure, cloud-based services.
Next-Gen Adaptive Intelligent
Authentication Platform

30. N1.1
N1.2
N1.3 Machine Learning
Transaction & Authentication Specific
Hybrid Model
Rules Based & Case Based
Openness
Hybrid Adaptive Intelligence Scoring Engine

31. Implement Server-to-Server
Authentication using PKI

32. What is PKI?

33. Public Key Infrastructure
Public Key
Private Key

34. What is a Certificate Authority?

35. SECRET
MARY’S
Public Key
IDEAL WORLD
MESSAGE
+
ENCRYPTED
MESSAGE

36. REAL WORLD
SECRET
Fake
MARY’S
Public Key
MESSAGE
+
ENCRYPTED
MESSAGE
MARY’S
Public Key
MODIFIED
ENCRYPTED
MESSAGE
+

37. HOW TO SOLVE PROBLEM?
SECRET
MESSAGE
+
ENCRYPTED
MESSAGE
MARY’S
Public Key

38. We are
going round
in circle!

39. PROBLEM SOLVED
CPS & CP
CERTIFICATE
AUTHORITY

40. Diffie-Hellman Key Exchange Explained

42. Why banks should use
digital certificates?

43. Your typical server room scene
How many servers do you have?

44. How many servers are talking to each
other?
Which server is talking to which server?
How do you take control of your
servers?
How many vendors do you have logged
onto your servers?

45. Assign each server a digital certificate

46. Digital Certificates Provides
Identity to each server
Expiry date

47. How much does
it cost?

49. Wow! So
expensive!

50. Become my own CA!
Next generation PKI

51. 51
Why a PKI Appliance?
• Make deployments easier and faster
• Minimize installation/integration efforts
• Lower the TCO with simplified management and maintenance
• Provide one source for Software/Hardware stack

52. A PKI Appliance Gives You...
• Overview of all your servers in your data centre
• Better security via Server-to-Server authentication
• Control over who can access your servers
• Easy management of your server access

53. ?

55. Questions?
SecureMetric Technology Group
Lim Chin Wan
Mobile : +6 016 261 8925
Office : +603 8996 8225
chinwan@securemetric.com
Formula for Strong Digital Security
sales@securemetric.com www.securemetric.com