The Tower Hotel, UK 19–20 September 2017 Welcome to the 17Th Consecutive Annual ATM Security Event Organised by ATMIA

#ATMsCash2017Sec (Formerly known as ATM Security (Formerly

In partnership

The Tower Hotel, UK 19–20 September 2017 Welcome To the 17th consecutive annual ATM security event organised by ATMIA. Thank you for your support this year and through the years. I was privileged to establish this conference back in 2001 and did not expect it then to become one of the most popular security events in our industry. This year, we have teamed up with our conference partners Reconnaissance International to expand our range of attendees whilst, at the same time, broadening the range of topics to cover ATM and payments security. The programme this year is both comprehensive and current, with a strong global scope. This year’s conference is special in other ways. ATMIA is spearheading a consortium for next generation ATMs, made up of major vendors, suppliers and deployers, which has signed off a blueprint for a new, more interoperable ecosystem for ATMs. It is intended to build E2E security into the implementation of the ATM blueprint. We invite you to speak to us during the conference if you are interested in being part of this process of ensuring next generation ATMs are more secure than ever before. ATMIA believes this is a critical future-proofing exercise for the industry. We wish you a pleasant, informative and inspirational time with your co-hosts, ATMIA and Reconnaissance, as you ensure you are fully up-to-speed with the latest information, ideas and technologies shaping ATM and payments security for the future.

Mike Lee, CEO, ATM Industry Association

JOIN US NEXT TIME

12-13 June 2018 Royal Lancaster London SPONSORS

Leading the innovation and development of security products, Cennox provides a full portfolio of solutions to support our Banking & Retail clients. Recently, Cennox announced our acquisition of 3SI Security Systems’ European Division. 3SI have been prolific in protecting customers across Europe, together we look forward to providing clients in this region with greater access to our winning solutions.

Detack GmbH has been an independent supplier of quality IT security auditing and consulting services for more than ten years. Detack aims to become the quality leader in the constantly changing field of information technology security. Detack GmbH has been a regular exhibitor at major industry fairs and conferences, presenting both products and know-how in the field of IT security. Drawing on the experience acquired over the years through participation in these major events, Detack has partnered up with security experts from around the world to co- organize conferences and information seminars for the IT Security industry.

Following independent assessment by the Metropolitan Police and the Co-op, one of the UK’s major retailers, SmartWater is now established as, arguably, the country’s most powerful crime deterrent. Using its robust traceable liquids, SmartWater has a peerless reputation throughout the World for helping police bring serious criminals to justice.

ThetaRay is a leading provider of a big data analytics platform and solutions for advanced cyber security, operational efficiency, and risk detection, protecting financial services sectors and critical infrastructure against unknown threats. ThetaRay’s core technology is based on state of the art algorithms, which power its proprietary Hyper-Dimensional, Multi-Domain Big Data Analytics platform. Organizations whose operations rely on highly heterogeneous and complex environments leverage ThetaRay’s unmatched detection and low false positive rates as a see-all power that enables them to unify detection and defeat the unknown. Programme Tuesday 19 September 2017

08:00 Registration Open, Exhibition Open & Refreshments Available – TOWER FOYER & TOWER SUITE 1

09:00 OPENING ADDRESS – TOWER SUITE 2 Mike Lee, CEO, ATM Industry Association KEYNOTE ADDRESS – THE USE OF EURO BANKNOTES AND RELATED SECURITY ASPECTS Henk Esselink, in his presentation, will address topical issues regarding the use of euro banknotes. His presentation will highlight the ECB’s policy on Intelligent 09:25 Banknote Neutralisation System (IBNS) and the most salient results of the ECB’s Study on the Use of Cash by Households, focusing on the use of ATMs. He will also provide an update on euro banknote circulation developments and counterfeiting trends Henk Esselink, Head of Issue & Circulation, Directorate of Banknotes, European Central Bank KEYNOTE ADDRESS - THE EVOLUTION OF FINANCIALLY-MOTIVATED CYBER PREDATORS Financial crime was the foundation stone of the anti-malware industry. For nearly a decade, malware analysts knew exactly what to expect from the attackers they encountered, precisely because their motivation was plain-and-simple financial gain. How times have changed. Now many of the high-end attackers making 10:15 headlines are well-resourced and cunning (even nation-state sponsored) teams. As we come to know more about these attackers, we see financial services as a common part of their tasking for varied reasons. Similarly, as their high-end techniques trickle down to run-of-the-mill adversaries, defenders begin to find themselves surrounded by capable attackers. The focus of this talk is the evolution of financially-motivated cyber attackers, their interests and techniques, and what nightmares still lie ahead for vulnerable financial services. Juan Andres Guerrero-Saade, Senior Security Researcher, GReAT, Kaspersky Lab

11:00 Coffee Break & Exhibition Open – TOWER FOYER & TOWER SUITE 1 DEFINING SECURITY EXCELLENCE FOR THE FUTURE OF ATMS In this talk Martin will explain his research findings on the differences between a merely good security department/supplier and an outstanding one. He will draw on work undertaken around the world which has sought to identify the criteria of good security and he will relate this to ATMs. It is a journey that will take in the 11:35 views of security experts on the one hand and the world view of the criminal based on his extensive interviews in prison with thieves, burglars, robbers, fraudsters, drug dealers and murderers to name but a few. He will explain their rationale, for example, why they choose a particular target, the types of measures that are a challenge and why and how they circumvent them. The key to excellence is knowing the threat and relating to the latest research findings and Martin will sum up with his thoughts. Professor Martin Gill, Director, Perpetuity Research & Consultancy International THE SECURITY OF POLYMER BANKNOTES – AN AUSTRALIAN PERSPECTIVE The first Australian polymer banknote was a commemorative banknote issued in 1988 with a full polymer series subsequently issued between 1992 and 1996. The 12:15 impetus for this shift to polymer was to be able to provide new, enhanced, security features. In recent years counterfeiters have increasingly taken advantage of technological developments in printing and copying. To ensure that counterfeiting remains low and banknotes remain a secure payment method, the Reserve Bank of Australia is issuing its next generation of polymer banknotes with upgraded security features. James Holloway, Deputy Head, Note Issuance Department, Reserve Bank of Australia

13:00 Lunch & Exhibition – TOWER FOYER & TOWER SUITE 1

STREAM 1 – ATM SECURITY – TOWER SUITE 2 STREAM 2 – CASH & PAYMENTS SECURITY – TOWER SUITE 3 CASH, CARD TRAPPING AND REVERSALS, INDUSTRY RESPONSE TO GLOBAL TRENDS AND INNOVATIONS IN NOTE DEGRADATION SYSTEMS LOW TECH ATTACKS A resume of the current systems in Europe, Asia, Africa and the Americas with specific attention on hotspots and some case studies, then a look at how 14:00 In the light of increasingly effective countermeasures from ATM operators, criminals are looking at some simpler techniques which can be just as effective effective these systems have been and likely future trends. and also put cash in their hands. David Milner, Chairman, EURICPA, Spinnaker International Ltd Graham Mott, Head of Strategy, LINK Interchange Network THE CRITICAL ROLE OF TECHNOLOGY INNOVATION AND INDUSTRY THE SUCCESS STORY OF HOW FORMS OF PAYMENT FRAUD ARE COLLABORATION IN PREVENTING CRIME MIGRATION BEING COUNTERED IN THE NETHERLANDS. Criminal techniques and ATM attacks spread like wild fire from one country to How the Dutch managed to increase electronic payments and at the same time another. For example, the hot-spot for ATM solid explosive attacks was South decrease fraud dramatically using technical measures, cooperation and sharing 14:30 Africa, but now attacks are common in Europe; deep insert skimming started in of information. the UK but has now spread to North America and APAC. This presentation shows Marco Doeland, Manager Risk Management, Dutch Payments Association examples of how industry collaboration at a global level and proactive technology innovation help to slow down the migration of ATM crime. Claire Shufflebotham, Global Security Director, TMD Security Gmbh THE LAUNCH OF ANTI-MONEY LAUNDERING INDUSTRY EMV AND PCI COMPLIANCE BEST PRACTICE FOR ATMS This presentation will cover the main questions around compliance and what 15:00 Challenging the misperception that white-label ATMs may be attractive to value compliance programs brings to you. The compliance programs we will be criminals for money laundering. discussing are PCI and EMV programs. Chris Chandler, President & CEO, Access Cash General Partnership (EZEE ATM) Niels de Vries, Team Lead, UL

15:30 Coffee break and Exhibition Open – TOWER FOYER & TOWER SUITE 1 OVERVIEW OF ATM PHYSICAL ATTACKS TRENDS WHEN YOUR “BACK DOOR” BECOMES THE HACKER’S FRONT DOOR This presentation will cover physical attacks trends on ATMs including smash This presentation will give examples of various attacks methods based on 16:00 & grab, torching, grinding and gas & solid explosives throughout Europe, Africa, hardware device manipulation and counter measures. North & South America and the major counter measures. Bentsi Ben Atar, CMO, Co-Founder, Sepio Systems Ltd Patrice Rullier, Managing Director, Oberthur Cash Protection ATM PHYSICAL AND LOGICAL ATTACK SCENARIOS IN BRAZIL INTERPOL – CONNECTING POLICE FOR A SAFER WORLD This presentation explores the recent history of ATM security in Brazil. Logical The presentation will give a brief overview about the worlds largest and physical attacks will be examined, along with actions taken to defeat international police organization INTERPOL, its role in the international law criminals, and the impact of ATM crime on industry players, the cash cycle, enforcement community, its objectives and the tools and services provided. 16:30 as well as on wider society. Finally, it will look at the road ahead, and new The work at INTERPOL’s Financial Crimes Unit, which is in charge of challenges faced by Brazilian deployers. combating different types of financial crime activities, will be covered. The Mauricio Tucci, Logical Security Executive Manager, Tecban – Tecnologia presentation also includes examples of the current nature of ATM related Bancaria fraud attacks and physical attacks, as well as payment card fraud schemes. Alexander Resch, Criminal Intelligence Officer, INTERPOL, General Secretariat THINKING OUT OF THE BOX: A NEW WAY TO BEAT MALWARE AT ATMS SECURITY PROS AND CONS OF MERCHANT CASH REPLENISHMENT Various forward looking studies on the benefit of the cloud for the ATM industry Merchant filled ATMs are common in the US & UK but are hardly seen in most identified new ways to minimise the impact of malware. This presentation markets. Ron Delnevo, whose company installed the first independent merchant 17:00 addresses the security benefits and reviews what the industry needs to do to filled ATM in UK, will thoroughly examine the security pro’s & cons of the benefit from modern security techniques. merchant fill model and outline his views on the likely future direction of ATM Eric de Putter, Managing Partner, Payment Redesign Ltd cash replenishment. Ron Delnevo, Executive Director Europe, ATM Industry Association

17:30 Drinks Reception – TOWER FOYER & TOWER SUITE 1 Sponsored by Programme Wednesday 20 September 2017

08:00 Registration Open, Exhibition Open & Refreshments Available – TOWER FOYER & TOWER SUITE 1 STREAM 1 – ATM SECURITY INNOVATIONS & SOLUTIONS STREAM 2 – CASH SECURITY INNOVATIONS & SOLUTIONS – TOWER SUITE 2 – TOWER SUITE 3 CURRENT ATM SECURITY BEST PRACTICES SECURITY INK TECHNOLOGIES FOR CASH AUTOMATION PROTECTION ATMIA has been a world leader in ATM security best practice since 2003. This AND MACHINE READABILITY presentation will outline the state of security best practices today and what The incessant growth of cash both in terms of volume and usage frequency resources the industry can draw on to fight ATM crime on all levels, from 09:15 has increased the complexity and demands of the cash cycle, notably in the physical to logical. But are we using all the tools at our disposal to deal with the management of cash automation. Security inks play a major role in contributing current crime wave? to cash processing innovation, ensuring the efficiency of cash automation while Mike Lee, CEO, ATM Industry Association protecting the integrity of the cash cycle. Richard Wood, Sales Director, SICPA ATM SECURITY IN THE COMING INTERNET OF THINGS BUILDING SECURITY INTO ATMS OF THE FUTURE Modern ATMs have always had a PC as a heart, but managing, securing, The emergence of ATM-specific viruses means ATM security is more important and deploying the software on an ATM has been fundamentally different than ever. It is vital that banks take this threat seriously and do all they can to than deploying corporate PCs. As we move into an era of cloud services and minimise the risks. Although software alone cannot make ATMs secure – the 09:50 exponentially expanding numbers of connected computers, ATMs are positioned minimum hardware must be in place first – the software must be right. It is to take advantage of advances in connectivity. But there will still be wrinkles in essential that security is an integral part of the software solution, rather than building and operating the ATM software stack and infrastructure! Let’s see how bolted on. Integrated security solutions are the way forward for banks. to think about securing and operating ATMs in the age of the Internet of Things. Aravinda Korala, KAL ATM Software Pat Telford, Principal Consultant, Microsoft Canada THE BENEFITS OF CLOUD SECURITY FOR ATMS – HOW SECURITY CHALLENGES CHANGE WITH TECHNOLOGY, ACCESSING IMPROVED SECURITY THROUGH CLOUD TECHNOLOGIES PRODUCING NEW TECHNICAL SOLUTIONS 10:25 This presentation will form a 2 part session working with Pat Telford discussing Andrew presents his view on the positive future for ATMs: with the new horizon security in the Cloud. comes new security challenges to which we all must be adaptive, flexible and Michael Wignall, Chief Technology Office, Microsoft UK alert. Andrew Martin, Managing Director, Retail Banking Consulting Group

11:00 Coffee break and Exhibition Open – TOWER FOYER & TOWER SUITE 1 GLOBAL ATM SECURITY INTELLICENCE AND WORKING WITH LAW THE ROLE OF FORENSIC TAGGANTS IN ENHANCING CASH SECURITY ENFORCEMENT FOR RISK REDUCTION A joint presentation with Cardtronics Head of Security, which will be a ‘before Security used to have a clear definition and mandate. But as technology and after’ case history, explaining why a UK major retailer decided to roll-out continues to accelerate and your organization moves to customer–centric SmartWater protection to all their ATM’s. 11:30 products – the walls that once existed between security and fraud are crumbling. Phil Cleary, CEO, SmartWater Technology Security and fraud has to be looked at holistically to protect your customer and your organization. This session will cover key trends, discuss the 4 pillars of A recent case study of an innovative and successful problem solution, using security and the benefits of broadening focus. SmartWater to assist in crime prevention. This involved a tripartite partnership between Cardtronics, SmartWater and a major UK retailer. Dena Hamilton, Director Fraud & Security Solutions, NCR Corporation Terence Bourke, Head of Operational Risk, Cardtronics SECURITY ASSESSMENT OF SMARTPHONE PAYMENTS THE SECURITY OF THE NEW £1 COIN Paul Tomasofsky will provide an assessment of how mobile devices are An overview of the security features for the new £1 coin and the reasons why 12:00 being used to make cardless ATM transactions and the security implications The Royal Mint developed the world’s most secure coin. associated with these products. James Whitburn, Director of Currency Security, The Royal Mint Paul Tomasofsky, President, Secure Remote Payment Council (USA) SECURITY TESTING IN THE ATM INDUSTRY HOW TO STOP ATTACKS It is imperative that ATM deployers of whatever size have confidence in the In 2015 Brazil had more than 1.200 ATM attacks. Gas and dynamite explosions security of their ATMs. Criminal techniques are constantly evolving to exploit destroyed for millions, but after the installation of a sophisticated Fog Cannon gaps in both physical security and fraud prevention defences. This session solution, these attacks have been reduced to an absolute minimum. From explains how to utilise criminal intelligence to create a framework and execute Denmark CEO at PROTECT Poul Dalsgaard and Global Segment Manager at 12:30 hands-on evaluation of the technical security solutions provided by ATM vendors PROTECT Stine Jensen will show videos and the full case, and they will also and third-party suppliers. Independent and objective identification of residual show you the monitoring solution, which today is installed in more than 4.500 risks allows corrective action to be taken before criminals exploit weaknesses banks in Brazil. across the ATM channel. Poul Dalsgaard, CEO, Protect A/S Douglas Russell, Director, DFR Risk Management Ltd Stine Jensen, Global Segment Manager – Bank/ATM, Protect A/S

13:00 Lunch & Exhibition – TOWER FOYER & TOWER SUITE 1

UNCOVERING THE UNKNOWN: ADVANCED ANALYTICS WITH BIG DATA FOR ATM SECURITY – TOWER SUITES 2 & 3 The threat landscape in today’s financial industry demands new innovation based on sophisticated advanced analytics to detect emerging threats, fraud, and operational risk. Many of the most meaningful anomalies are found hiding in rich high-dimensional data, and in the intricate links inside multiple sources of data. Founded by two of the world’s leading mathematicians, ThetaRay patented analytics offer a new level of protection against ‘blind spots’ that are not addressed by legacy approaches. ThetaRay is partnering with leading global banks to enhance ATM security, detect emerging fraud and reduce operational risk by ‘uncovering 14:00 unknown unknowns’ in complex big data sets. ThetaRay’s approach does not require pre-knowledge of the data and does not require rules, patterns, signatures, data semantics, or heuristics. ThetaRay’s analytical engine detects anomalies in real time, improves alert quality and enhances forensic investigation by ingesting data from a variety of sources (e.g. financial data, business transactions, ATM machine data, network traffic & logs, etc.) Kris Robinson, EVP Americas, ThetaRay Inc Netty Meiroff, Senior Adviser Banking and ATM, ThetaRay Inc Peter Kulik, Director, Digital ATM, Citibank

THE TOP ATM SECURITY TRENDS TO LOOK OUT FOR UP TO 2020 – TOWER SUITES 2 & 3 International organised crime groups are constantly inventing new methods and adapting technologies to exploit gaps in the solutions deployed to protect ATMs from 14:40 attack. This session explores how physical and fraud attacks have evolved over time and lays out a vision of what trends we should expect to witness over the next few years. Both the very sophisticated and extremely low-tech attacks will be discussed. Douglas Russell, Director, DFR Risk Management Ltd and ATM security consultant

PANEL DISCUSSION: CASH AND CRIME – DISTINGUISHING MYTH FROM REALITY – TOWER SUITES 2 & 3

Moderator: Mike Lee, CEO, ATMIA 15:20 Panelists: Andrea Nitsche, Cash Matters Guillaume Lepecq, Founder, AGIS Consulting & Chair, Cash Essentials Douglas Russell, Director, DFR Risk Management Ltd and leading ATM security consultant CLOSING REMARKS WITH INTRODUCTION TO SECURITY 2018 16:00 Mike Lee, CEO, ATMIA FLOOR PLANTOWER HOTEL FLOORPLAN

09 08 07

10 06

11 05 Tower 2 Tower 3 Exhibition 04 12

01 02

Exhibition/Foyer Registration Desk 13 14 Bridge 1

KEY Bridge 2 01 PROTECTSingle booth 3X2m A/S Refreshments and Lunch 02 ATM Industry Association 10 Reslam 03 SMARTSTAIN 11 Squad Asset Track 04 KAL 12 Spinnaker International Ltd 05/06 Cennox / 3SI Security Systems 13 Tyco Integrated 07/08 TMD Security Gmbh Fire & Security 09 Oberthur Cash Protection 14 Currency News

We would like to thank all of our exhibitors. Please make sure to visit them during the conference. Cennox_ATMIA_Advert.pdf 1 01/09/2017 12:21:14

CMY

K Our Sponsors

Conference Sponsors

Global Sponsors

Regional Sponsors Media Sponsors Working together to bring you the latest developments in ATMs & Payments

4–5 OCTOBER 2017 Johannesburg, South Africa

22–23 NOVEMBER 2017 Kuala Lumpur, Malaysia

6–8 FEBRUARY 2018 Wynn, Las Vegas US CONFERENCE 2018

12–13 JUNE 2018 Royal Lancaster, London

18–19 OCTOBER 2018 Madrid, Spain www.atmiaconferences.com ATMIA MEMBERSHIP HAS ITS PRIVILEGES ATMIA membership saves your business time, money and understand and influence regulatory processes; participate resources. We deliver top-notch educational opportunities, in the local, regional and global ATM community; and premier advocacy services, meaningful connections and forge new relationships to advance your business through industry visibility that is second to none. comprehensive programs and services. ATMIA is committed to helping you keep abreast of Tap into all things ATM with ATMIA membership to unlock industry news and developments; increase knowledge the capabilities and benefits you can’t get elsewhere. You’re and professionalism; improve operational efficiencies; sure to take your business to the next level!

Save 20% by Joining Today—Stop by the ATMIA Booth

ATMIA Security Program Ad.indd 1 8/30/17 8:47 PM