Abstract
Accelerated by the COVID-19 pandemic, the trend of highly-sophisticated logical attacks on Automated Teller Machines (ATMs) is ever-increasing nowadays. Due to the nature of attacks, it is common to use zero-day protection for the devices. The most secure solutions available are using whitelist-based policies, which are extremely hard to configure. This article presents the concept of a semi-supervised decision support system based on the Random forest algorithm for generating a whitelist-based security policy using the ATM usage data. The obtained results confirm that the Random forest algorithm is effective in such scenarios and can be used to increase the security of the ATMs.
Supported by Diebold Nixodrf.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Barbosa, R., Sadre, R., Pras, A.: Flow whitelisting in SCADA networks. Int. J. Crit. Infrastruct. Prot. 6, 150–158 (2013). https://doi.org/10.1016/j.ijcip.2013.08.003
Stouffer, C.: NortonLifeLock: What is a zero-day exploit? https://us.norton.com/internetsecurity-emerging-threats-how-do-zero-day-vulnerabilities-work.html
European Association for Secure Transactions: Terminal fraud attacks in Europe drop during the Covid-19 pandemic. https://www.association-secure-transactions.eu/terminal-fraud-attacks-in-europe-drop-during-the-covid-19-pandemic/
Hastie, T., Tibshirani, R., Friedman, J.: The Elements of Statistical Learning, 2nd edn. Springer, NY (2009). https://doi.org/10.1007/978-0-387-21606-5
Ho, T.: A data complexity analysis of comparative advantages of decision forest constructors. Pattern Anal. Appl. 5, 102–112 (2002). https://doi.org/10.1007/s100440200009
Ho, T.K.: Random decision forests. In: Proceedings of the Third International Conference on Document Analysis and Recognition, vol. 1, p. 278. ICDAR 1995, IEEE Computer Society, USA (1995)
Idera, Inc. Company: Test Automation for All. https://www.ranorex.com
International Monetary Fund, Financial Access Survey: ATMs per 100,000 adults. https://data.worldbank.org/indicator/fb.atm.totl.p5
Klerx, T., Anderka, M., Büning, H.K., Priesterjahn, S.: Model-based anomaly detection for discrete event systems. In: 2014 IEEE 26th International Conference on Tools with Artificial Intelligence, pp. 665–672 (2014). https://doi.org/10.1109/ICTAI.2014.105
Maliszewski, M., Boryczka, U.: Basic clustering algorithms used for monitoring the processes of the ATM’s OS. In: 2017 IEEE International Conference on INnovations in Intelligent SysTems and Applications (INISTA), pp. 34–39 (2017). https://doi.org/10.1109/INISTA.2017.8001128
Maliszewski, M., Pristerjahn, S., Boryczka, U.: DBSCAN algorithm as a means to protect the ATM systems. In: 2018 Innovations in Intelligent Systems and Applications (INISTA), pp. 1–6 (2018). https://doi.org/10.1109/INISTA.2018.8466322
Maliszewski, M., Boryczka, U.: Using MajorClust algorithm for sandbox-based ATM security. In: 2021 IEEE Congress on Evolutionary Computation (CEC), pp. 1054–1061 (2021). https://doi.org/10.1109/CEC45853.2021.9504862
NIST, National Vulnerability Database: CVE-2021-44228. https://nvd.nist.gov/vuln/detail/CVE-2021-44228
Probst, P., Boulesteix, A.L.: To tune or not to tune the number of trees in random forest. J. Mach. Learn. Res. 18(1), 6673–6690 (2017)
Quinlan, J.R.: Induction of decision trees. Mach. Learn. 1(1), 81–106 (1986). https://doi.org/10.1023/A:1022643204877
Quinlan, J.R.: C4.5: Programs for Machine Learning. Morgan Kaufmann Publishers Inc., San Francisco, CA (1993)
Sedgewick, A., Souppaya, M., Scarfone, K.: Guide to application whitelisting. NIST Spec. Publ. 800(167), 2–3 (2015). https://doi.org/10.6028/NIST.SP.800-167
Ho, T.K.: The random subspace method for constructing decision forests. IEEE Trans. Pattern Anal. Mach. Intell. 20(8), 832–844 (1998)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Maliszewski, M., Boryczka, U. (2022). Random Forest in Whitelist-Based ATM Security. In: Nguyen, N.T., Tran, T.K., Tukayev, U., Hong, TP., Trawiński, B., Szczerbicki, E. (eds) Intelligent Information and Database Systems. ACIIDS 2022. Lecture Notes in Computer Science(), vol 13758. Springer, Cham. https://doi.org/10.1007/978-3-031-21967-2_24
Download citation
DOI: https://doi.org/10.1007/978-3-031-21967-2_24
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-21966-5
Online ISBN: 978-3-031-21967-2
eBook Packages: Computer ScienceComputer Science (R0)