From a Hacker's Perspective: How to Breach a Point-of-Sale System
|
 |
|
Identify Viable Targets
Identify viable targets for a breach.
After determining what assets they have obtained, hackers will likely then move to see if there were any viable targets in their catch. That is, if there were any major or minor retailers they gained data from during the attack.
They will then typically pick the biggest retailer and start working toward their objectives – compromising the corresponding POS terminals.
Image courtesy of digitalart at FreeDigitalPhotos.net
According to the Identity Theft Resource Center, over 500 data breaches have been reported in the United States this year, showing an increase of 27.5 percent over the same period last year.
At the same time, electronic payments have started to outnumber cash transactions, and hackers have taken notice – with an increased number of point-of-sale (POS) system breaches making the headlines. Recent POS hacks, like those on Home Depot and Target, are likely due, in part, to the systems not being properly protected from potential vulnerabilities, which allows for an easy way in.
In this slideshow, Russ Spitler, vice president of product management at AlienVault, discusses the step-by-step analysis from the perspective of a hacker and what he or she would have to do to breach a POS system.
AlienVault is a leading provider of unified security management and crowd-sourced threat intelligence. Its products are designed and priced to ensure that mid-market organizations can effectively defend themselves against today's advanced threats.
Related Topics : Unisys, Stimulus Package, Security Breaches, Symantec, Electronic Surveillance
PAM Solutions: Critical to Securing Privileged Access
To protect the company from those insiders who abuse their privileged access and from hackers with stolen credentials, many companies are turning to a privileged access management (PAM) solution. ... More >>
How Can We Fix the Fake News Problem?
Is fake news a security issue? Some say yes, as it can be used as a social engineering tool to spread disinformation and conceivably to get unsuspecting users to click on malicious links. ... More >>
The World According to Blockchain
Blockchain comes with many costs and is surrounded by confusion. Here, we examine realistic use cases, drawbacks and the potential of blockchain. ... More >>