Kaspersky's latest embedded system security solution for ATM and POS terminals


As the attack strategies used by cybercriminals become more complex and regulatory pressures continue to rise, financial companies face increasing barriers in protecting their ATMs, point-of-sale systems and service endpoints. To help these institutions and companies, Kaspersky Lab has released the latest generation of Kaspersky embedded system security solutions. This targeted, enterprise-class solution provides advanced protection for a wide range of embedded systems involving highly sensitive financial transactions while allowing these companies to address pressing regulatory requirements.

Today's cybercriminals have successfully borrowed the strategies and technologies used by APT attack organizations to attack banks, causing increasingly serious security problems for financial organizations. In 2016, high-tech attacks against financial organizations developed rapidly, such as the Metel, GCMAN, and Carbanak 2.0 attacks. In 2017, Kaspersky Lab experts even discovered more samples of this type of malware. These include mysterious attacks in which cybercriminals use memory-free, file-free malware to infect the banking network. There are also ATMitch malware that can remotely manage theft of cash in ATMs without leaving traces. All of these APT-style attacks combine techniques such as reconnaissance, social engineering, custom malware, horizontal mobility tools, and long-term residency to steal money from financial institutions.

In response to increasingly complex cyber threats, the world's leading financial organizations such as SWIFT (Global Banking Financial Telecommunications Association) are introducing new mandatory rules to protect themselves from cybercriminals. They developed security standards and guidelines for the financial industry, including the need to use anti-malware protection solutions, vulnerability assessments, and security awareness. In order to meet the needs of customers and enhance the protection of the financial industry, Kaspersky Lab provides enterprise-level customers with an efficient security protection solution that meets global compliance standards while providing customers with the visibility they need.

The cutting-edge innovations of Kaspersky Embedded System Security Solutions make the infrastructure more transparent and can be easily reviewed or investigated in the event of a security incident or violation. With the latest file integrity monitoring, security experts can track operations on specific files and folders to ensure file changes are not ignored. The latest version also supports log detection, which analyzes the behavior of protected systems, finds violations or abnormal behavior, and saves logs for further analysis. By adding SIEM integration, the solution can now also export application logs to the Corporate Security Operations Center. All of these technologies provide security teams and external auditors with the tools they need to ensure infrastructure compliance and security.

Even traditional and widely used malware can easily target these embedded systems based on low-end hardware and outdated operating systems as easy targets. In addition, there are many complex threats, such as fileless malware that resides in memory. To address these threats, Kaspersky Embedded System Security Solutions ensure real-time anti-malware protection at both the file and memory levels, with manual scanning and process memory protection.

Other security features include USB/CD/DVD access control and centralized firewall management and a default denial mode that can intercept any unauthorized executable code or drivers running on ATM and POS terminals.

Dmitry Zveginets, head of Kaspersky Lab's solutions business, said: "Considering the frequent occurrence of security incidents related to important embedded systems such as ATMs and POS terminals, enterprise organizations, especially those in the financial industry, will face increasingly severe regulatory pressures next year. Currently, they need to deploy a variety of protection tools to meet their needs. To help these organizations and enterprises, we provide a full-featured, dedicated single solution, including file integrity monitoring and log checker capabilities, to address the many protections of customers at once. And compliance issues."

To learn more about Kaspersky Embedded System Security Solutions, please visit our website. The solution is part of Kaspersky Lab's enterprise portfolio and is currently available online.

B Ag

Cosmetic Bag,Travel Bag,Tote Bag,Shopping Bag

qiangcheng Industry and trade Co.ltd , https://www.qiangchenbag.com