Privacy and the new CCTV surveillance technology

Privacy protected with the new CCTV surveillance technology. (Image: 3VR)

Most people are unhappy about being filmed by CCTV, in case the footage is used against them in some unlikely way. Now 3VR, a surveillance technology company has come up with a method of scrambling the images of anyone in CCTV film who is not a suspect.

3VR, based in San Francisco, says it should reassure members of the public who do not wish to be identifiable to police or lawyers, or even TV crime-stopper shows.

Face-recognition Algorithms

The technology uses 3VR's recently patented face-recognition algorithms to home in on known faces in crowds. An image-scrambling algorithm then blurs the faces and bodies of those who are not of interest and encrypts the blur pattern. So, no one but the operator of the technology can unscramble it.

An image-scrambling algorithm blurs the faces of those in the footage who are not of interest

Monitor Known Felons

"This allows you to search for suspects, known felons and people on watch lists, but without capturing massive databases of apparently innocent people," says Stephen Russell, 3VR's chairman. The company aims to supply the equipment to banks and retail chains so they can analyse CCTV footage for known suspects. Criminals who install card skimmers on ATMs are a likely target.

Open to Abuse

The idea is unlikely to satisfy all privacy advocates, since scrambled footage is still open to abuse. "A safer approach is to record images, only when machine analysis detects something suspicious and that way there is no recording of anything, for 99.99 per cent of the time," says Mike Lynch of data-analysis company Autonomy.

ATMs and Cash machines hacked

"SKULDUGGERY," says Andrew Henwood, "is a very good word to describe what this extremely advanced, cleverly written malware gets up to. We've never seen anything like it."

What he has discovered is a devious piece of criminal coding that has been quietly at work in a clutch of cash machines at banks in Russia and Ukraine. It allows a gang member to walk up to an ATM, insert a "trigger" card, and use the machine's receipt printer to produce a list of all the debit card numbers used that day, including their start and expiry dates - and their PINs. Everything needed, in fact, to clone those cards and start emptying bank accounts. In some cases, the malicious software even allows the criminal to eject the machine's banknote storage cassette into the street.

The software is the latest move in a security arms race after banks and consumers got wise to the fitting of fake fascias onto ATMs. These fascias have been criminals' main way of using ATMs to get the details they need to clone cards. They contain a camera to spy on PINs being entered on the keypad, and a card reader to skim data from the card's magnetic stripe. It's big business: across Europe, losses due to such fraud grew by 11 per cent to €484 million in 2008, according to the European ATM Security Team (EAST), funded by the European Union and based in Edinburgh, UK (see graph).

Banks responded by investing in anti-skimming technology - which can detect a fake fascia overlay and disable the ATM. So crooks are developing new tricks, which are being uncovered by Henwood and his colleagues at SpiderLabs, a computer forensics research centre in London.

Conficker Worm - the story so far ..........

A HOTEL bar in Arlington, Virginia, 23 October 2008. A group of computer security experts has spent the day holed up with law enforcement agencies. It is an annual event that attracts the best in the business, but one the participants like to keep low-key - and under the radar of the cybercriminals they are discussing.

That evening, conversation over drinks turned to a security update Microsoft had just released. Its timing was suspicious: updates usually came once a month, and the next was not due for two weeks. "I remember thinking I should take a look at this," recalls Paul Ferguson, a researcher at Trend Micro, a web security company in Cupertino, California.

He did. So did the rest of the computer security industry. In fact, they talked, puzzled and worried about little else for months after. The update heralded the birth of the Conficker worm - one of the most sophisticated pieces of malignant software ever seen.

Despite an unprecedented collaboration against them, Conficker's accomplished creators have been able to bluff and dodge to gain control of machines inside homes, universities, government offices and the armed forces of at least three nations, establishing a powerful and lucrative network of "zombie" computers. New Scientist has pieced together the sobering details of that cat-and-mouse fight.

Conficker's creators bluffed and dodged to gain control of machines in militaries, universities and governments