Susan Burns, George R. S. Weir, Department of Computer and Information Sciences, University of Strathclyde, Glasgow G1 1XH, UK {susan.burns, george.weir}@cis.strath.ac.uk
University of Strathclyde and Associates: Abstract. The introduction of smartcard technologies has reduced the incidence of card fraud in the UK, but there are still significant losses from fraudulent card use. In this paper we detail the context of smartcard introduction and describe the types of fraud that remain a threat to cardholders and other stakeholders in the card system. We conclude with a risk analysis from the cardholders perspective and recommend greater cardholder awareness of such risks.
University of Strathclyde and Associates: Introduction. A recent report from the European Security Transport Association (ESTA) found that nearly 20% of the adult population in Great Britain has been targeted as part of a credit or debit card scam. As a result, the UK has been termed the Card Fraud Capital of Europe [1], with UK citizens twice as likely to become victims of card fraud as other Europeans. Plastic card fraud is a lucrative exploit for criminals and the proceeds may be used to fund organised crime. Smart payment cards (Chip and PIN cards) were introduced in the UK to replace magnetic stripe cards and support PIN verification of card transactions. By the end of 2005, more than 107 million of the 141.6 million cards in the UK had been upgraded to smart cards [2]. Levels of plastic card fraud fell by 13% to 439.4 million in 2005 [3] and again to 428 million in 2006 (Figure 1). The reduction has been widely attributed to the rollout of smart cards with Chip and PIN authentication.
If the media is to be believed, the UK introduction of Chip and PIN authentication for credit and debit card transactions is flawed and has failed to reduce levels of card fraud across the board. Specific cases highlighting the security implications of smart card based technology have been widely reported, including exploits at Shell petrol stations [4] and Tesco self-service tills.
As cards are a widely accepted international form of payment, fraud can happen virtually anywhere in the world or on the Internet. Cards can be compromised in the UK and then used overseas. Cardwatch research shows that most of the fraud committed abroad on UK cards affects cards that have been compromised in the UK
Although the financial cost of card fraud is largely borne by the banking industry, the cardholder experiences loss of time in taking steps to resolve matters, as well as inconvenience, worry and frustration while a fraudulent incident is investigated. The cardholders credit rating can be affected and the whole affair can be a distressing experience.
Showing posts with label strathclyde associates. Show all posts
Showing posts with label strathclyde associates. Show all posts
Thursday, December 16, 2010
Strathclyde University And Associates: Boiler Room Movie Review
The Digital Information Office, Strathclyde University and Associates service for electronic resource management review by Bradley Null: America is the land of opportunity, and now more than ever, the opportunity that most Americans are preoccupied with is that of easy money. Our news media is saturated with stories of the instant millionaire, 25-year-old startup CEOs worth nine figures or the crafty investor that bought that startup on IPO and doesn't have to worry too much about his day job anymore either. There are a number of powerful cautionary tales waiting to be drawn from this unwholesome frenzy. Boiler Room tries to tell one of these stories, but sadly it fails to add much to the greed genre established by its two heavily referenced predecessors: Wall Street (1987) and Glengarry Glen Ross (1992).
Boiler Room is the story of Seth (Ribisi), a 19-year-old college dropout obsessed with the American dream of easy money. After concluding rather quickly that college isn't necessarily the fast track to a quick buck, he opens up an underground casino out of his house in Queens, providing a popular service for the local city college kids. After his disapproving father (Rifkin) finds out about the casino, Seth, feeling a repressed need to gain his father's approval, looks into an opportunity to become a stockbroker at the small firm of J.T. Marlin.
As it turns out, the firm, located in the heart of Long Island, conspicuously far from Wall Street, is a 'chop shop,' shorthand for a brokerage house more interested in pawning off securities for its own interests rather than serving its customers. When Seth's father discovers this, not only does Seth not find the approval he was hoping for, but he is excommunicated from the family.
Though he has only a minor part in the film, Ben Affleck is highlighted in trailers for the film, and the discerning observer will notice a strong similarity between his scene in the trailer, and Alec Baldwin's immortalized portrayal of a real estate shark in Glengarry Glen Ross. In fact, Affleck's big scene draws heavily on Baldwin's, though his performance (and the material he has to work with) does not live up to what is almost universally agreed upon as the best performance of Baldwin's career. This is not the only referencing of David Mamet's portrayal of the dark world of real estate cold-calling in this movie, however. Later in the film, when receiving some instructions on how to cold-call potential customers, Seth is told to remember one of Baldwin's catch phrases from that scene, 'A-B-C. Always Be Closing.' Boiler Room also liberally references, both directly and indirectly, its direct predecessor in the 'greed is good' category of filmmaking. Not only drawing its basic theme and plot structure from Wall Street, Boiler Room also draws its best dialogue during a scene in which a number of young stock brokers sitting in one of their sparely decorated mansions, compete with each other to quote lines from Wall Street, whose antagonist, Gordon Gecko, is obviously regarded as an idol within the group.
As a movie, Boiler Room is moderately entertaining. Vin Diesel in particular, off a strong turn in Saving Private Ryan, turns in another powerful performance as Chris, one of Seth's mentors at J.T. Marlin. Sadly though, Ben Younger, in his writing and directorial debut, adds very little to the filmic pantheon in his own voice. Even the film's most prolific statement on the American obsession with getting rich, 'either you're slinging crack rock or you've got a wicked jump shot,' is a quote of the rap star Notorious B.I.G. The most admirable outcome of this film might be that it leads viewers to check out its two predecessors. I would urge the same as well.
Boiler Room is the story of Seth (Ribisi), a 19-year-old college dropout obsessed with the American dream of easy money. After concluding rather quickly that college isn't necessarily the fast track to a quick buck, he opens up an underground casino out of his house in Queens, providing a popular service for the local city college kids. After his disapproving father (Rifkin) finds out about the casino, Seth, feeling a repressed need to gain his father's approval, looks into an opportunity to become a stockbroker at the small firm of J.T. Marlin.
As it turns out, the firm, located in the heart of Long Island, conspicuously far from Wall Street, is a 'chop shop,' shorthand for a brokerage house more interested in pawning off securities for its own interests rather than serving its customers. When Seth's father discovers this, not only does Seth not find the approval he was hoping for, but he is excommunicated from the family.
Though he has only a minor part in the film, Ben Affleck is highlighted in trailers for the film, and the discerning observer will notice a strong similarity between his scene in the trailer, and Alec Baldwin's immortalized portrayal of a real estate shark in Glengarry Glen Ross. In fact, Affleck's big scene draws heavily on Baldwin's, though his performance (and the material he has to work with) does not live up to what is almost universally agreed upon as the best performance of Baldwin's career. This is not the only referencing of David Mamet's portrayal of the dark world of real estate cold-calling in this movie, however. Later in the film, when receiving some instructions on how to cold-call potential customers, Seth is told to remember one of Baldwin's catch phrases from that scene, 'A-B-C. Always Be Closing.' Boiler Room also liberally references, both directly and indirectly, its direct predecessor in the 'greed is good' category of filmmaking. Not only drawing its basic theme and plot structure from Wall Street, Boiler Room also draws its best dialogue during a scene in which a number of young stock brokers sitting in one of their sparely decorated mansions, compete with each other to quote lines from Wall Street, whose antagonist, Gordon Gecko, is obviously regarded as an idol within the group.
As a movie, Boiler Room is moderately entertaining. Vin Diesel in particular, off a strong turn in Saving Private Ryan, turns in another powerful performance as Chris, one of Seth's mentors at J.T. Marlin. Sadly though, Ben Younger, in his writing and directorial debut, adds very little to the filmic pantheon in his own voice. Even the film's most prolific statement on the American obsession with getting rich, 'either you're slinging crack rock or you've got a wicked jump shot,' is a quote of the rap star Notorious B.I.G. The most admirable outcome of this film might be that it leads viewers to check out its two predecessors. I would urge the same as well.
Strathclyde Associates Trading And Management Construction Tips For Hiring Contractors
Tips for hiring contractors (and 10 ways to avoid scammers). Strathclyde Associates Trading and Management Construction Company: To protect yourself and your money here are 4 tips to ensure that your next remodeling project goes smoothly.
We love building for ourselves, but some jobs just need to be subbed out. Unfortunately, a competent, honest remodeling contractor is no easy find. There are thousands of reliable, trustworthy contractors out there but there are quite a few toolbox-wielding knuckleheads, too. Heres what you should keep your eye on:
Tips for hiring contractors (and 10 ways to avoid scammers). Strathclyde Associates Trading and Management Construction Company: Avoid sleazy or shady tactics.
The first thing to do is make sure you're not being scammed. Beware these 10 red flags:
The contractor ...
Provides credentials or references that can't be verified.
Offers a special price, but only if you sign a contract today.
Accepts only cash, requires large deposits or wants the entire cost up front.
Asks you to write a check in his name (not to the business).
Won't provide a written contract or complete bid.
Refuses to apply for building permits, and asks you to get them.
Offers exceptionally long warranties.
Proposes to do most or all of the work on weekends and after-hours.
Gives you a low-ball offer that sounds too good to be true.
Has "Will work for beer" painted on the side of his trucks.
Tips for hiring contractors (and 10 ways to avoid scammers). Strathclyde Associates Trading and Management construction Company: Check the construction work.
When you meet with contractors, ask each to bring photos or drawings of completed jobs that are similar to yours. When possible, ask to visit a completed project. Get in touch with the homeowners involved, says construction manager Amy Johnston, author of What the Experts May Not Tell You about Building or Renovating Your Home. Ask pointed, pertinent questions such as:
What was the original construction budget?
What was the final construction budget?
How would you describe the quality of the work?
Was the job site kept clean and organized?
Was the project completed on time?
Were any liens filed on your property?
Would you work with this contractor again?
Vetting a contractor through customers works both ways word-of-mouth recommendations have long been one of the most reliable means of finding competent contractors. Seek references from neighbors, friends, architects, colleagues and real-estate agents. You can also find local contractors, along with ratings and reviews, from online sources, such as Angie's List.
Tips for hiring contractors (and 10 ways to avoid scammers). Strathclyde Associates Trading and Management Construction Company: Check the paperwork.
Check to make sure contractors are licensed and insured. A good pro should volunteer documentation. If you have doubts, contact the Better Business Bureau and check for complaints. When comparing competitors' bids, make sure everything is spelled out. This includes the scope of the work, materials specified, warranties, references, time frames, cost overruns, payment
Once you have chosen a contractor, obtain a written contract that includes the items specified in the original bid, plus the final price, payment terms, sales tax, permit fees, the specific work to be performed, materials to be used, warranties, start and end date, change-order processes, final review and sign-off procedures and debris removal. Once the job is under way, make sure the necessary building permits are on display.
Tips for hiring contractors (and 10 ways to avoid scammers). Strathclyde Associates Trading and Management Construction Company: Check the bills.
When advancing money for materials, ask the contractor if you can pay the supplier directly. Always pay with a check, never by cash. Take a carrot-and-stick approach to completed work pay incrementally as each significant phase of work is completed. Be careful about paying for work that hasn't been finished. Before making the final payment, do a visual inspection of the entire project and make a punch list of any repairs or uncompleted work. Put all change orders in writing; avoid verbal contracts.
A small but important technicality: Request signed lien releases from all major subcontractors and suppliers before making final payments. A lien release guarantees that the contractor has fully paid his materials suppliers. Former contractor Tom Philbin, author of "How to Hire a Home-Improvement Contractor Without Getting Chiseled," tells the story of a Memphis, Tenn., homeowner who had some work done on his house. "The job went smoothly and he paid the general contractor all the money for the job. But the contractor hadn't paid his supplier, who slapped a lien on the homeowner. The homeowner ultimately had to pay an additional $20,000, even though he had paid the contractor in full." Get those lien releases. By Joseph Truini, Popular Mechanics
Strathclyde Associates Trading and Management Construction Company is passionate in the belief that from adversity comes opportunity. We believe that sustainable competitive advantage is always predicated upon the focused execution of a few core strengths or priniciples that are indemic to each particular company.
We love building for ourselves, but some jobs just need to be subbed out. Unfortunately, a competent, honest remodeling contractor is no easy find. There are thousands of reliable, trustworthy contractors out there but there are quite a few toolbox-wielding knuckleheads, too. Heres what you should keep your eye on:
Tips for hiring contractors (and 10 ways to avoid scammers). Strathclyde Associates Trading and Management Construction Company: Avoid sleazy or shady tactics.
The first thing to do is make sure you're not being scammed. Beware these 10 red flags:
The contractor ...
Provides credentials or references that can't be verified.
Offers a special price, but only if you sign a contract today.
Accepts only cash, requires large deposits or wants the entire cost up front.
Asks you to write a check in his name (not to the business).
Won't provide a written contract or complete bid.
Refuses to apply for building permits, and asks you to get them.
Offers exceptionally long warranties.
Proposes to do most or all of the work on weekends and after-hours.
Gives you a low-ball offer that sounds too good to be true.
Has "Will work for beer" painted on the side of his trucks.
Tips for hiring contractors (and 10 ways to avoid scammers). Strathclyde Associates Trading and Management construction Company: Check the construction work.
When you meet with contractors, ask each to bring photos or drawings of completed jobs that are similar to yours. When possible, ask to visit a completed project. Get in touch with the homeowners involved, says construction manager Amy Johnston, author of What the Experts May Not Tell You about Building or Renovating Your Home. Ask pointed, pertinent questions such as:
What was the original construction budget?
What was the final construction budget?
How would you describe the quality of the work?
Was the job site kept clean and organized?
Was the project completed on time?
Were any liens filed on your property?
Would you work with this contractor again?
Vetting a contractor through customers works both ways word-of-mouth recommendations have long been one of the most reliable means of finding competent contractors. Seek references from neighbors, friends, architects, colleagues and real-estate agents. You can also find local contractors, along with ratings and reviews, from online sources, such as Angie's List.
Tips for hiring contractors (and 10 ways to avoid scammers). Strathclyde Associates Trading and Management Construction Company: Check the paperwork.
Check to make sure contractors are licensed and insured. A good pro should volunteer documentation. If you have doubts, contact the Better Business Bureau and check for complaints. When comparing competitors' bids, make sure everything is spelled out. This includes the scope of the work, materials specified, warranties, references, time frames, cost overruns, payment
Once you have chosen a contractor, obtain a written contract that includes the items specified in the original bid, plus the final price, payment terms, sales tax, permit fees, the specific work to be performed, materials to be used, warranties, start and end date, change-order processes, final review and sign-off procedures and debris removal. Once the job is under way, make sure the necessary building permits are on display.
Tips for hiring contractors (and 10 ways to avoid scammers). Strathclyde Associates Trading and Management Construction Company: Check the bills.
When advancing money for materials, ask the contractor if you can pay the supplier directly. Always pay with a check, never by cash. Take a carrot-and-stick approach to completed work pay incrementally as each significant phase of work is completed. Be careful about paying for work that hasn't been finished. Before making the final payment, do a visual inspection of the entire project and make a punch list of any repairs or uncompleted work. Put all change orders in writing; avoid verbal contracts.
A small but important technicality: Request signed lien releases from all major subcontractors and suppliers before making final payments. A lien release guarantees that the contractor has fully paid his materials suppliers. Former contractor Tom Philbin, author of "How to Hire a Home-Improvement Contractor Without Getting Chiseled," tells the story of a Memphis, Tenn., homeowner who had some work done on his house. "The job went smoothly and he paid the general contractor all the money for the job. But the contractor hadn't paid his supplier, who slapped a lien on the homeowner. The homeowner ultimately had to pay an additional $20,000, even though he had paid the contractor in full." Get those lien releases. By Joseph Truini, Popular Mechanics
Strathclyde Associates Trading and Management Construction Company is passionate in the belief that from adversity comes opportunity. We believe that sustainable competitive advantage is always predicated upon the focused execution of a few core strengths or priniciples that are indemic to each particular company.
Risk Assessment: Smartcard Fraud Scam
Risk Assessment Department of Computer and Information Sciences, University of Strathclyde and Associates. Security is a balance between confidentiality, authentication and integrity versus convenience, cost and reliability. Figure 4 illustrates the balance that must be struck by stakeholders when implementing technical solutions to counter security vulnerabilities,
Abstract. The introduction of smartcard technologies has reduced the incidence
of card fraud in the UK, but there are still significant losses from fraudulent
card use. In this paper we detail the context of smartcard introduction and describe
the types of fraud that remain a threat to cardholders and other stakeholders
in the card system. We conclude with a risk analysis from the cardholders
perspective and recommend greater cardholder awareness of such
risks. Susan Burns, George R. S. Weir
Department of Computer and Information Sciences, University of Strathclyde,
Glasgow G1 1XH, UK
Risk Assessment. Department of Computer and Information Sciences, University of Strathclyde and Associates. Security is a balance between confidentiality, authentication and integrity versus convenience, cost and reliability. Figure 4 illustrates the balance that must be struck by stakeholders when implementing technical solutions to counter security vulnerabilities, essentially this boils down to cost versus benefits.
This generic approach can be applied to security measures for smart card payments,
whereby:
Cost is the amount it costs the card issuer and card scheme to support the plastic
card payments, including the cost of implementing changes to the system e.g.
longer keys or moving to online authentication to validate all card transactions;
Performance considers convenience and reliability e.g. avoiding reputational
damage or inconvenience for customers or retailers;
Risk is remaining level of risk which the security measures have not fully mitigated.
This could be financial loss, additional costs, loss of market share, reputational
damage, corporate embarrassment, legal or regulatory investigation or risk
to personal safety.
The potential loss or exposure from a given risk can be reduced through assessing and
management of the risk (Figure 5). Effective risk reduction methods may leave an
element of residual risk, but will bring benefits, although these may not always be financial, e.g., they could be reputational benefits.
A risk map is a technique to analyse and illustrate risks, likely causal events and potential
impacts [10]. The links shown are not always exhaustive but demonstrate the
potentially wide ranging impacts of each risk and support analysis of outcomes and
mitigation actions. As a tool, they also allow flexibility to consider how the impact of
one risk, e.g., card stolen, can be compounded by the occurrence of other risks, such
as the PIN having been obtained.
Figure 6 illustrates a risk map analysis for the cardholder, based upon four primary
risk conditions, card obtained by fraudsters, card details obtained by fraudsters, PIN
obtained by fraudsters, and PIN forgotten by cardholder. The associated cardholder
events represent the contexts in which the risks are created, and the impact arising
from these circumstances is also indicated.
For the cardholder, the key risks centre on the components for which the cardholder
is responsible, namely the smartcard, the PIN and documents such as statements
and receipts that contain card details. The events include some that are within
the cardholders control, e.g., keeping a note of the PIN number, but others such as a compromised terminal are beyond cardholder control.
Summary and Conclusions. Risk Assessment Department of Computer and Information Sciences, University of Strathclyde and Associates. The introduction of smartcards to the UK marketplace has had a significant effect in reducing the incidence of card fraud, but further steps are required to prevent continued instances of fraud. A key step in this direction is to clarify the roles, responsibilities and risks faced by the different stakeholders in the card process. Furthermore, awareness raising in which cardholders become more conscious of their risks and responsibilities may afford the best defence against consumer fraud. Our analysis of the card process, stakeholders and cardholder risks may contribute to this awareness.
Abstract. The introduction of smartcard technologies has reduced the incidence
of card fraud in the UK, but there are still significant losses from fraudulent
card use. In this paper we detail the context of smartcard introduction and describe
the types of fraud that remain a threat to cardholders and other stakeholders
in the card system. We conclude with a risk analysis from the cardholders
perspective and recommend greater cardholder awareness of such
risks. Susan Burns, George R. S. Weir
Department of Computer and Information Sciences, University of Strathclyde,
Glasgow G1 1XH, UK
Risk Assessment. Department of Computer and Information Sciences, University of Strathclyde and Associates. Security is a balance between confidentiality, authentication and integrity versus convenience, cost and reliability. Figure 4 illustrates the balance that must be struck by stakeholders when implementing technical solutions to counter security vulnerabilities, essentially this boils down to cost versus benefits.
This generic approach can be applied to security measures for smart card payments,
whereby:
Cost is the amount it costs the card issuer and card scheme to support the plastic
card payments, including the cost of implementing changes to the system e.g.
longer keys or moving to online authentication to validate all card transactions;
Performance considers convenience and reliability e.g. avoiding reputational
damage or inconvenience for customers or retailers;
Risk is remaining level of risk which the security measures have not fully mitigated.
This could be financial loss, additional costs, loss of market share, reputational
damage, corporate embarrassment, legal or regulatory investigation or risk
to personal safety.
The potential loss or exposure from a given risk can be reduced through assessing and
management of the risk (Figure 5). Effective risk reduction methods may leave an
element of residual risk, but will bring benefits, although these may not always be financial, e.g., they could be reputational benefits.
A risk map is a technique to analyse and illustrate risks, likely causal events and potential
impacts [10]. The links shown are not always exhaustive but demonstrate the
potentially wide ranging impacts of each risk and support analysis of outcomes and
mitigation actions. As a tool, they also allow flexibility to consider how the impact of
one risk, e.g., card stolen, can be compounded by the occurrence of other risks, such
as the PIN having been obtained.
Figure 6 illustrates a risk map analysis for the cardholder, based upon four primary
risk conditions, card obtained by fraudsters, card details obtained by fraudsters, PIN
obtained by fraudsters, and PIN forgotten by cardholder. The associated cardholder
events represent the contexts in which the risks are created, and the impact arising
from these circumstances is also indicated.
For the cardholder, the key risks centre on the components for which the cardholder
is responsible, namely the smartcard, the PIN and documents such as statements
and receipts that contain card details. The events include some that are within
the cardholders control, e.g., keeping a note of the PIN number, but others such as a compromised terminal are beyond cardholder control.
Summary and Conclusions. Risk Assessment Department of Computer and Information Sciences, University of Strathclyde and Associates. The introduction of smartcards to the UK marketplace has had a significant effect in reducing the incidence of card fraud, but further steps are required to prevent continued instances of fraud. A key step in this direction is to clarify the roles, responsibilities and risks faced by the different stakeholders in the card process. Furthermore, awareness raising in which cardholders become more conscious of their risks and responsibilities may afford the best defence against consumer fraud. Our analysis of the card process, stakeholders and cardholder risks may contribute to this awareness.
Subscribe to:
Posts (Atom)