Point of Sale System Architecture and Security
summary
Live demonstration captures full card numbers and expiration dates in plain text from an EMV chip read by doing a memory dump with a free Microsoft tool and inspecting it in a hex editor, and shows magstripe readers acting as keyboard emulation so keystroke loggers can steal track data. Presenter cites Verizon data where 190+ cases involve POS and reports of a new RAM‑scraper family on ~600 systems. Practical fixes include hardware encrypting card readers, tokenization, and locking down remote support with two‑factor auth.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:27Speaker background
- 1:10Small business breaches
- 4:11Breach methodology
- 4:56Vulnerability factors
- 5:45Large-scale attacks
- 7:39POS system analysis
- 10:46Secure pin pad technology
- 12:05EMV chip vulnerability
- 15:44Card data flow risks
- 18:19Security recommendations
- 20:35Q&A session
related talks
56mAnatomy of memory scraping credit card stealing POS malware
54mThe Underground Ecosystem of Credit Card Frauds
50mBreaking Payment Points of Interaction (POI)
57mAnatomy of ... POS Malware
40mPiOSoned POS - A Case Study in iOS based Mobile Point-of-Sale gone wrong
24mPicking Up My Tab...
23mAll Your Payment Tokens Are Mine: Vulnerabilities of Mobile Payment Systems
33mHacking Next-Gen ATMs: From Capture to Cashout