ANI
14 Aug 2019, 23:26 GMT+10
Washington D.C. [USA], Aug 14 (ANI): Scientists have developed an app that allows inspectors to detect devices that steal consumer credit and debit card data at gas pumps. The devices, known as skimmers, use Bluetooth to transmit the data they steal.
"All criminals have to do is download the data from the comfort of their vehicle," said Nishant Bhaskar, a Ph.D. student in computer science at the University of California San Diego and the study's first author.
The app, called Bluetana, detects the Bluetooth signature of the skimmers and allows inspectors to find the devices without needing to open up the gas pumps.
Bluetana was developed with technical input from the United States Secret Service and is only available to law enforcement officials and gas pump inspectors. It will not be available to the general public. It is now used by agencies in several states.
"Our goal is to give field agents the best tools for the job available today. We've found that Bluetana helps agents find more gas stations with skimmers and to find more skimmers at those gas stations," said Kirill Levchenko, a computer science professor at the University of Illinois who earned his Ph.D. at the Jacobs School of Engineering at UC San Diego.
The researchers found that, compared to similar apps currently available for smartphones, Bluetana is likely to discover more skimmers and results in a much lower false-positive rate. "Bluetooth technology used in these skimmers are also used for legitimate products commonly seen at and near gas stations such as speed-limit signs, weather sensors, and fleet tracking systems," said Bhaskar.
These products can be mistaken for skimmers by existing detection apps.
According to the study presented at the USENIX Security 2019 conference, Bluetana uses an algorithm developed by the researchers to distinguish skimmers from legitimate Bluetooth devices. The researchers designed the algorithm based on the results of a field study during which the researchers analysed scans of Bluetooth devices taken by officials at 1,185 gas stations in six U.S. states.
"Bluetana extracts more meaningful data from the Bluetooth protocol, such as signal strength, than existing skimmer detection applications. In a few cases, our app was able to find devices missed by visual inspection," said Maxwell Bland, a Ph.D. student in computer science at UC San Diego and study co-author.
In one year of operation, Bluetana has led to the discovery of 42 Bluetooth-based skimmers across three U.S. states, all of which were recovered by law enforcement agents.
"We were surprised that there were so many skimmers in the field that had not been discovered by other detection methods such as regular manual inspections. We even found two skimmers that were installed in gas pumps and had evaded detection for six months," said Aaron Schulman, a UC San Diego assistant professor in computer science.
Skimmers have a high return on investment for criminals: skimmed debit card numbers can be used to withdraw cash and skimmed credit card numbers to make expensive purchases. A skimming device costs $20 or less to manufacture and can bring in more than $4,000 per day, depending on how many people use the gas pump and how the criminal converts the stolen numbers to cash.
Criminals break into the pumps, many of which can be opened using a universal master key, to install the skimmers. Skimmers are connected to both the keypad and the magnetic stripe reader inside the gas pump. This allows the devices to collect not only customers' card numbers but also their billing ZIP code and PIN, in the case of a debit card transaction.
It takes Bluetana, on average, three seconds to detect a skimmer. By contrast, law enforcement officials can take 30 minutes on average to find skimmers during manual inspections. (ANI)Get a daily dose of San Diego Sun news through our daily email, its complimentary and keeps you fully up to date with world and business news as well.
Publish news of your business, community or sports group, personnel appointments, major event and more by submitting a news release to San Diego Sun.
More InformationHAYWARD, California: In a significant step toward its commercial debut, Amazon-owned Zoox has unveiled its first factory dedicated...
Dallas [US] June 24 (ANI): Sikandar Raza of the Seattle Orcas has been found to have breached the Major League Cricket (MLC) Code of...
Dallas [US], June 24 (ANI): After their fourth 200-plus score in five games, San Francisco Unicorns extend their lead at the top of...
Washington DC [US], June 23 (ANI): Actor and musician Marc Maron's new comedy special will be available to stream on HBO Max starting...
New Delhi [India], June 23 (ANI): Former shooter Abhinav Bindra, top shuttler PV Sindhu and other athletes led Olympic Day 2025 celebrations...
Jewish screenwriters have allegedly pushed the image of an Iranian nuclear threat through film and TV since the early 2010s ...
BARCELONA, Spain: Residents of Barcelona have devised a novel way to protest the presence of tourists in their city. Using a cheap...
CHICAGO, Illinois: For the first time in history, U.S. officials are considering a coordinated plan to vaccinate poultry against bird...
NEW YORK, New York - U.S. stocks made strong gains on Monday, brushing off concerns Donald Trump's surprise ambush of Iranian nuclear...
NEW YORK CITY, New York: The U.S. bombing of Iranian nuclear sites has cast a shadow over global markets, with investors bracing for...
SANTAREM, Brazil: As Brazil cements its position as the world's top soy exporter, a new wave of deforestation is spreading across the...
ZURICH, Switzerland: A wave of central banks across Europe surprised markets last week by lowering interest rates, responding to easing...