Patent ID: 8418248

Claim:
A method for recognizing attacks on at least one interface of an automated self-service machine, to which at least one peripheral device of the automated self-service machine is connected, the method comprising: monitoring of the interface to detect changes at the interface; if changes occur, calculating a probability of an unauthorized attack on the interface based on the type of change; wherein one or more of the following events is taken into consideration in calculating the probability: a reliability of a serial number of the at least one peripheral device connected to the interface; a reliability of a maker/product combination for the at least one peripheral device; a reliability of a device class of the at least one peripheral device; a reliable number of devices from a device class of the at least one peripheral device; a time interval between removing a device from and connecting a device to the interface; a device path or type of connection; a time of day at which a device is connected to or removed from the interface; and a mode for the automated self-service machine when a device is connected to or removed from the interface, including a customer operation mode or a service mode; and wherein if the probability is beyond a defined threshold, defensive measures are introduced.