by Roland Costea | Released July 2018 | ISBN: 9781789615968

Build PSD2 and GDPR compliance and learn how to protect against financial malwareAbout This VideoThe course is delivered in a mix of over the shoulder lessons and PowerPoint presentations. So, either it shows you clicks on the screen and how exactly you do different actions, or it presents you the full concept using slides.On top of that, you will get downloadable resources that will help you in your journey.In DetailThe course is a complete A to Z, so we will cover everything that you need to know.In this way, we will first understand financial institutions challenges, PSD2 benefits for consumers, risks involved, security of payments and new types of service providers. We will follow up with GDPR relation and the impact of PSD2 and GDPR for banks. We will learn about open banking methodologies, what financial malware is and how operates. In the end, we will understand how to create a business case for our financial institution and how some hacking attacks are performed. By going through the course you will also get really good resources like PSD2 directive and implementation guide or GDPR implementation guide, open banking implementation and uier experience guides and also the language report that banks relates to. Financial gain is still one of the major motivations behind most cybercriminal activities and there is little chance of this changing in the near future. One trend that has become evident over the last year is that cybercriminals are increasingly moving beyond banking customers and are now also targeting financial institutions directly using top of the rock financial malware. So how can we protect using cloud security and why cloud security is the best approach instead of on premises tools? Once inside the financial institution's network, the attacker can learn how to transfer money, issue fraudulent transactions, or orchestrate ATM machines to dispense cash, these being the end result of the financial malware. Boost your career by understanding the mechanisms behind financial malware and what banks are looking for in choosing their anti-malware solutions and why cloud security is the best option in this case! Show and hide more

1. Chapter 1 : Introduction
   • Welcome and Intro 00:01:55
2. Chapter 2 : Payment Services Directive (PSD2)
   • What is PSD 2 and main objectives? 00:04:18
   • Benefits for consumers 00:07:08
   • Scope of PSD2 directive 00:02:56
   • New rules on authorization and supervision 00:05:26
   • Security of Payments 00:03:10
   • New types of service providers – TPPs 00:06:42
   • Impact of PSD2 to financial services industry 00:04:29
   • New risks associated with the TPPs 00:06:49
3. Chapter 3 : GDPR and PSD2
   • GDPR intro 00:02:49
   • Banks are caught between GDPR and PSD2 00:06:03
   • Other challenges - GDPR and PSD2 00:06:07
   • What is Open Banking Consent Model? 00:04:17
   • Consent Step 00:02:39
   • Authentication Step 00:01:05
   • Authorization Step 00:02:15
   • Redirection 00:01:30
   • Data Minimization & Permissions 00:01:56
4. Chapter 4 : Other banking challenges related to cyber risk
   • 1.2 Today Challenges 00:05:35
   • 1.3 Target and Distribution 00:06:20
   • 1.4 Attack Methods 00:06:47
   • 1.5 Infection Vectors 00:05:55
   • 1.6 Targeted attacks against financial institutions 00:05:21
   • 1.7 Mobile Platform and Email Scams 00:09:28
   • 1.8 TakeDowns and Conclusions 00:06:24
5. Chapter 5 : Malware History with Examples
   • 2.1 Past 3 decades of malware (part 1) 00:06:49
   • 2.2 Past 3 decades of malware (part 2) 00:10:52
   • 2.3 The Architecture of Financial Malware 00:05:40
   • 2.4 Zeus 00:12:36
   • 2.5 Zeus GameOver (P2P) 00:11:15
   • 2.6 SpyEye 00:11:03
   • 2.7 IceIX 00:08:30
   • 2.8 Citadel 00:10:48
   • 2.9 Carberp 00:07:26
   • 2.10 Shylock 00:07:33
   • 2.11 Bugat 00:02:55
   • 2.12 Dyre 00:11:15
   • 2.13 Dridex 00:10:13
   • 2.14 Shifu 00:07:07
   • 2.15 Tinba 00:05:56
6. Chapter 6 : Making a Business Case for Financial Malware
   • 3.1 Why Fraud Risk Engines fail? 00:08:23
   • 3.2 How to bypass 2 factor authentication 00:07:18
   • 3.3 Fraud Prevention Technology 00:08:40
   • 3.4 Compliance and Legal issues 00:04:45
   • 3.5 Customer Impact 00:05:58
   • 3.6 Selecting the right cybercrime prevention solution 00:13:37
   • 3.7 Malware Detection – intro 00:03:48
   • 3.8 Malware Detection Advanced 00:05:44
   • 3.9 Malware Detection - how technology can help? 00:07:07
   • 3.10 Criminal Detection & Account Takeover 00:05:40
   • 3.11 Account Takeover - product architecture example 00:12:08
   • 3.12 What about Mobile Banking 00:09:49
7. Chapter 7 : Some simple hacking attempts – demo
   • 4.1 Lab Setup 00:02:59
   • 4.2 XSRF attack 00:07:13
   • 4.3 Compromising Public Server 00:07:28
   • 4.4 Break-In: Compromising the victim computer 00:02:59
   • 4.5 Other Web Application Attack Example 00:04:17
   • 4.6 Locky Ransomware 00:05:58
   • 4.7 Gathering Info & Exfiltrate 00:09:12
8. Chapter 8 : Conclusion
   • Conclusion 00:02:45
Show and hide more