Leta: Protection of ATM networks

"Protection of ATM networks" - complex service for the organizations - owners of ATM networks and payment terminals. This service is addition of a product line of LETA focused on the credit and financial organizations, operators of payment terminals, large retail chain stores.

The new service allows the customer to implement "turnkey" an end-to-end organizational and technical system of ensuring integrity of the application and system software and control of applications of ATMs (including vulnerable outdated and unsupported operating systems, for example, of Windows NT/2000). At the same time as a technical basis of the solution the family of the McAfee Integrity Control software products is used: Application Control and Change Control. Besides, the customer receives the regulated process of management of configurations of ATMs and payment terminals and also the system of fully functioning processes of information security support of such networks. Let's especially note that system implementation is performed taking into account requirements of standards and domestic policy of cybersecurity. Besides, the solution provides protection against unauthorized actions of service employees and the attacks from external malefactors.

Use of this system allows the customer to reduce risks of cybersecurity, a labor cost and cost of control of compliance of ATM network to reference configurations of the application and system software, to cut down expenses on its software updating, to increase the level of information security in general and, as a result, – customer confidence and partners. Besides, loadings decrease and the technological effectiveness and efficiency of divisions of IT and cybersecurity at service of ATM network and payment terminals increases.

Software of McAfee supports all most widespread computing platforms (MS Windows, Linux, Solaris), requires the minimum technical resources and at the same time has broad functionality. So, the subsystem of McAfee Application Control provides security blanket of memory of the performed processes, control of installation and applications launch, dynamic change of the list of the entrusted software. The subsystem of McAfee Change Control is responsible for audit of changes of configurations, recording of events, control of integrity of files and prevention of their unauthorized changes and "compliance blurs" (compliance drift). It, in particular, allows to block effectively unauthorized applications and the malware (including protection against zero-day of threats without updating of signatures), to reduce the frequency of installation of updates (virtual patching), to control politicians of change of software. Thus, McAfee Integrity Control (Application Control + Change Control) blocks unauthorized applications and changes in service points, including ATMs, payment and POS terminals, information booths. The Integrity Control system provides centralized operation, control of compliance to reference configurations of the application and system software – in combination with the lists, best in the industry, of the entrusted applications (whitelisting) and technology of change management taking into account the politician and the entrusted sources.

"Today criminals, as a rule, do not rush into departments of banks any more, do not open safes. But not because lost interest in banking sector. Just crimes using hi-tech tools allow to achieve bigger – with smaller risk. Substitution of software in ATMs and other terminals – a widespread type of such crimes and in Russia, and abroad, – Konusov Andrey, the CEO of LETA says. – On this way our new service puts a reliable barrier before malefactors. The customer receives the complete solution which is easy for managing how the network was big. And except decrease in operating costs and level of straight lines and reputational risks the organization automatically obtains data which can significantly help crime investigation. I believe that widespread introduction of our new development in short terms will make crimes unattractive for crime, will allow to reduce threat of loss of confidential information and means of the Russian citizens and the organizations in scales of all industry".