StoneGate IPS in Trust bank

The Leta company — operator of the typified IT services — announced in October, 2011 project completion on creation of an intrusion prevention system for Trust bank. As a technical basis the product StoneGate IPS of StoneSoft company, developer of technical means of protection in the field of ensuring complex network security and business continuity was selected. The implemented system already is in commercial operation.

The Trust bank builds the information security policy according to requirements of industry standards of service station of BR IBBS-1.0-2010 and PCI DSS. Within implementation of requirements of these standards the large-scale project on creation of the end-to-end system reducing the risks of direct and consequential financial loss entering model of threats of information security was started. Creation of the cybersecurity solution on an intrusion prevention from the Internet in computer systems of bank became an important part of this end-to-end system. This solution will reveal, register, trace and block harmful activity of network traffic, says Leta.

The choice for benefit of StoneGate IPS is caused by the fact that this intrusion detection and prevention system allows to provide full control of communication channels and pro-active prevention of the attacks on critical servers and workstations of network and also a possibility of inspection of the ciphered web traffic that, in turn, allows to prevent the hidden attacks on websites and to prevent leak of confidential information. At the same time much higher level of security is provided, than at the protection performed by traditional means, even in a complex with HOST IPS and considerably load of the protected server decreases, emphasized in Leta. Besides, StoneGate IPS has certificates of GOST P, Ministry of Communications and FSTEC on compliance of the specification and to the 4th class for ITU.

System implementation passed on the typified scheme repeatedly approved by Leta company in projects on implementation of the different IB technical means. At the first stage specialists of Leta carried out the analysis of network, activity in the field of IT and cybersecurity and also the existing documents. The next stage was devoted to joint formation of technical specifications on an intrusion prevention system. Further system implementation was carried out. On final, the fourth, a stage a system passed the test program and was transferred to an operating mode.

"Invasion from the Internet into computer systems of large bank can cause notable damage to both the bank, and his clients. Naturally, we in every way aim to prevent a possibility of a similar situation in our bank — the director of directorate of information security of Trust bank Al-Ulyafi Said noted. — It is simply impossible to make it without modern cybersecurity solutions. Considering importance of a task, we entrusted its implementation to Leta company — the recognized expert in plot area of a system of protection against invasions. The project was successfully implemented".

"Practically all Russian banks implement at themselves the industry standards of service station of BR IBBS-1.0-2010 and PCI DSS approved with the existing regulatory base in the field of protection of PDN. The development of these standards and a scope them all main components of information security of modern bank allow the customer, implementing different subsystems of cybersecurity within separate projects, to be sure that at the correct organization of works all elements will develop in a complete end-to-end system of cybersecurity — Konusov Andrey, the CEO of Leta company told. — Such rational and weighed approach was shown by the customer in this project. It is sure that the created intrusion prevention system not only effectively solves an assigned task, but also will naturally fit into an end-to-end system of information security of Trust bank".