DBSCAN Algorithm as a means to protect the ATM Systems

摘要

Automated teller machines are affected by two kinds of attacks: physical attacks, and software-based attacks, whereas the latter is becoming more and more popular every day. Most banks tend to look for a day-zero protection in order to secure their devices. Two most popular mechanisms are whitelisting and sandboxing. However, this kind of protection is not only hard to configure, but it also requires a deeper knowledge about software security as well as the information about the software currently installed on the device. The goal of this article is to present a possibility of using a modified DBSCAN algorithm to solve a complex configuration problem which is clustering programs within operating system. Results of the experimental studies show that this kind of automatic configuration can be even more precise than the basic clustering algorithms. As the results show great promise, it is all right to believe that the algorithms could be used in security products if additional security rules are taken into account.