Fingereye: improvising security and optimizing ATM transaction time based on iris-scan authentication

Abstract

The tumultuous increase in ATM attacks using eavesdropping, shoulder-surfing, has risen great concerns. Attackers often target the authentication stage where a customer may be entering his login information on the ATM and thus use direct observation techniques by looking over the customer's shoulder to steal his passwords. Existing authentication mechanism employs the traditional password-based authentication system which fails to curb these attacks. This paper addresses this problem using the FingerEye. The FingerEye is a robust system integrated with iris-scan authentication. A customer’s profile is created at registration where the pattern in his iris is analyzed and converted into binary codes. The binary codes are then stored in the bank database and are required for verification prior to any transaction. We leverage on the iris because every user has unique eyes which do not change until death and even a blind person with iris can be authenticated too. We implemented and tested the proposed system using CIMB bank, Malaysia as case study. The FingerEye is integrated with the current infrastructure employed by the bank and as such, no extra cost was incurred. Our result demonstrates that ATM attacks become impractical. Moreover, transactions were executed faster from 6.5 seconds to 1.4 seconds.

Detection of Ponzi scheme on Ethereum using machine learning algorithms

“…Based on crypto-analysis report on virtual currency scams (investors.org, 2022), over 750 million Naira has been lost to Ponzi schemes. Based on their report there is an indication that financial security 7 is a serious issue in the blockchain ecosystem 8 . Hence, identifying Ponzi schemes in Ethereum will protect investors’ interests and at the same time reduce the losses incurred by investors.…”

Air-Gapped Networks: Exfiltration without Privilege Escalation for Military and Police Units

“…If the user does so, they may be unwittingly installing malware on their computer. Exfiltration over physical media (EoPM) is a technique that can be used to exfiltrate data from a secure network across an insecure medium [6][7][8][9][10][11]21]. The term was coined in 2006 by security researcher Michael Ossmann and has been used primarily in the context of computer security [7].…”

“…This makes it an ideal tool for gaining access to or extracting data from a target network [16]. In this poster, we will discuss how it can be used for data exfiltration [3,[6][7][8][9][10][11][21][22][23]. Finally, regarding the motivations of using Bash Bunny, the Bash Bunny is a powerful USB device created for penetration testers and security professionals.…”

A decentralized consensus application using blockchain ecosystem

“…The three building blocks of a blockchain are shown in the Figure 1. -Encryption and cryptography: These ensure security services such as authentication, authorization, non-repudiation and confidentiality [8,9]. -Consensus mechanisms: These are the algorithms used to decide, whether, a new block of validated transactions should be added to the chain or rejected.…”