SWIFT, the Society for Worldwide Interbank Financial Telecommunication, is a system that provides an electronic fund transfer standard between banks all over the world. Swift started to be actively studied and used in 1977 and is still actively used today. This system identifies each bank through the BIC (Bank Identifier Codes) code, i.e. the bank identification code.<\/p>\n
We can define SWIFT as the system used by banks for money transfers between countries. The transfer orders prepared at the banks are transmitted to the relevant center as SWIFT messages, and after a series of verification procedures, the money transfer takes place.<\/p>\n
In recent years, international attacks targeting SWIFT transfers have led to some significant reputational damage and high financial losses. Many important banks in Turkey and internationally have fallen victim to these attacks.<\/p>\n
SWIFT has released a comprehensive Customer Security Program (CSP) targeting the security of users to prevent these attacks, which are becoming more frequent and causing significant damage.<\/p>\n
The SWIFT Customer Security Program is a security program created by SWIFT to detect and prevent fraudulent activity.<\/p>\n
With this training, you will learn the Swift Customer Security Controls Framework (CSCF), that is, what are the mandatory and advisory security controls for Swift users, and all the detailed content on virtual security in the banking sector.<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” scene_position=”center” text_color=”dark” text_align=”left” top_padding=”3%” overlay_strength=”0.3″ shape_divider_position=”bottom” bg_image_animation=”none” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_position=”all” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_link_target=”_self” column_shadow=”none” column_border_radius=”none” width=”1\/1″ tablet_width_inherit=”default” tablet_text_alignment=”default” phone_text_alignment=”default” overlay_strength=”0.3″ column_border_width=”none” column_border_style=”solid” bg_image_animation=”none”][toggles style=”minimal”][toggle color=”Extra-Color-2″ title=”About Education”][vc_column_text]Education Objectives<\/p>\n
<\/p>\n
Education Content<\/p>\n
General definitions of payment systems<\/p>\n
EFT infrastructure, working logic and possible security vulnerabilities<\/p>\n
SWIFT infrastructure, operational logic and potential security vulnerabilities<\/p>\n
Alternative payment systems and the future<\/p>\n
Blockchain (BlockChain)<\/p>\n
Bitcoin, the digital currency and its uses<\/p>\n
Vulnerabilities and exploitation methods of Bitcoin and similar currencies<\/p>\n
Isolating the SWIFT System from Other Systems<\/p>\n
Controlled Account Usage<\/p>\n
Unauthorized SWIFT transactions via VPN scenario<\/p>\n
Unauthorized SWIFT transactions via APT attacks against the end user<\/p>\n
Unauthorized SWIFT transactions by exploiting server-based vulnerabilities<\/p>\n
A sample cyber attack scenario against SWIFT Infrastructure (Hands-on)<\/p>\n
Examples of advanced malware targeting payment systems (Odinaff, Carbanac)<\/p>\n
Analysis of Odinaff and Carbanac malware<\/p>\n
Penetration testing steps for SWIFT Systems<\/p>\n
How to detect cyber attacks on the SWIFT system?<\/p>\n
Internal Network Data Flow Security<\/p>\n
Updates<\/p>\n
System Tightening<\/p>\n
Password Policies<\/p>\n
Multi-Factor Login Verifications<\/p>\n
Account Management<\/p>\n
Token Management<\/p>\n
Malware Protection<\/p>\n
Software Integrity<\/p>\n
Database Integrity<\/p>\n
Log Mechanism and Management<\/p>\n
Cyber Incident Response Planning<\/p>\n
Back Office Data Flow Security<\/p>\n
External Transmission Data Protection<\/p>\n
User Session Integrity<\/p>\n
Vulnerability Scanning<\/p>\n
Non-System Critical Activities<\/p>\n
Personnel Review Process<\/p>\n
Physical and Logical Password Storage<\/p>\n
Attack Detection<\/p>\n
Penetration Tests<\/p>\n
Scenario and Risk Analysis<\/p>\n
Developing secure SWIFT infrastructure SIEM correlation rules<\/p>\n
Security tightening recommendations for SWIFT infrastructure and software (KB 5020786)<\/p>\n
Isolation of SWIFT infrastructure from other networks<\/p>\n
Intrusion and anomaly detection system deployment for a network of SWIFT systems<\/p>\n
Security tightening of operating systems on which SWIFT software is installed<\/p>\n
Control of authorized accounts<\/p>\n
Decoupling SWIFT systems included in the domain environment<\/p>\n
Tightening the communication traffic of SWIFT systems through the firewall<\/p>\n
Sample SIEM correlation rules against potential SWIFT security exploit events<\/p>\n
Security review of SWIFT software used in Turkey and recommendations<\/p>\n
Examples of cyber attacks targeting banking infrastructure and payment systems<\/p>\n
Case Studies (Central Bank of Russia, Bangladesh Central Bank and Vietnam TP Bank)<\/p>\n
SWIFT attacks targeting Turkey<\/p>\n
Banks whose licenses were revoked after the cyber attack<\/p>\n
Cyber attacks targeting the Turkish banking sector in 2016[\/vc_column_text][\/toggle][toggle color=”Extra-Color-2″ title=”Who Should Receive the Training?”][vc_column_text]\n
[vc_row type=”full_width_content” full_screen_row_position=”middle” column_margin=”default” scene_position=”center” text_color=”dark” text_align=”center” overlay_strength=”0.3″ shape_divider_position=”bottom” bg_image_animation=”none” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_position=”all” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_link_target=”_self” column_shadow=”none” column_border_radius=”none” width=”1\/1″ tablet_width_inherit=”default” tablet_text_alignment=”default” phone_text_alignment=”default” overlay_strength=”0.3″ column_border_width=”none” column_border_style=”solid”…<\/p>\n","protected":false},"featured_media":108955,"template":"","meta":[],"product_brand":[],"product_cat":[580,294,253,245],"product_tag":[],"class_list":{"0":"post-108556","1":"product","2":"type-product","3":"status-publish","4":"has-post-thumbnail","6":"product_cat-academy-club","7":"product_cat-software","8":"product_cat-business-world","9":"product_cat-general","11":"first","12":"outofstock","13":"shipping-taxable","14":"product-type-simple"},"yoast_head":"\n