Embedded System Term Paper
Embedded System Term Paper
Introduction: Automated Teller Machines (ATMs) are one of the highest value
customer touch points in the banking industry. ATM are increasing day by day in
banking industry. Providing a direct interface to cash inevitably makes ATMs a
target in a numerous and sophisticated ways with new methods being regularly
exposed. Attack methods extend from physical (such as skimming and pin
cameras) to virtual through malware. Above all, the customer must trust the
ATM. Banks and ATM operators must protect their ATMs and meet their
compliance obligations for operating in a heavily regulated industry sector. But
doing so can be challenge. They are subject to vulnerabilities and often exploited
in similar fashion to a laptop or workstation.
This document identifies security audit for ATMs, considering the protection that
can be provided by the hardware and the software of the ATM itself against
attacks aimed at compromising sensitive data acquired, stored, exported, or in
any way processed by the device. This document is aligned with the security
approach and modularity of the set of security requirements.
Methodology: Kali Linux is the most popular software package for penetration
testing and security audit, in which many books have been written in this topic.
The objective of this paper is to provide a comprehensive review on the security
penetration and security audit using Kali Linux. Section 2 describes the
penetration testing, while Section 3 explains about the role of security analysis.
Section 4 describes security audit, while Section 5 describes the setup of Kali
Linux, Section 6 describes vulnerability assessment of live ATM, and Section 7
describe how to mitigate the vulnerabilities for enhancing ATM security. The last
section concludes this paper.