With the tactics of cybercriminals getting ever more sophisticated, and with regulatory pressures also mounting, financial enterprises are up against increasing hurdles when it comes to future-proofing their ATMs, Point of Sale systems and Point of Service machines. To help these organizations, Kaspersky Lab hasreleased a new generation ofits Kaspersky Embedded Systems Security. This targeted enterprise-grade solution provides advanced protection fora variety of embedded systems involved inhighly sensitive financial operations,while at the same time allowingthese businesses to address pressing regulatory requirements.

Cybercriminals today are successfully adopting tactics and techniques of theAPT groups involved in bank robberies, giving financial organizations increasing security problems. 2016 sawarapiddevelopment in hi-techattacks on financial organizations– such as the Metel, GCMAN and Carbanak 2.0 attacks. In 2017 Kaspersky Lab experts ran into even more examples. These included mysterious attacks where criminals used fileless in-memory malware to infect banking networks,as well as ATM itch, the traceless malware that cashed out ATMs via remote administration. All these APT-style attacks combined reconnaissance, social engineering, specialized malware, lateral movement tools and long-term persistence to steal money from financial institutions.

In response to the rise in these cyberthreats, world-leading financial organizationslike SWIFTare introducing newmandatory regulations to protect themselves from cybercriminals. These establishsecurity standards and guidelines for the financial sector, including the need foranti-malware protection, vulnerability assessment, security awareness.To support requirements and to boost the protection of financial companies, Kaspersky Labis providingits enterprise-level customers with efficient security that meets major global compliance standards and gives them the visibility they need.

Multiple cutting-edge innovations within the Kaspersky Embedded Systems Securitysolution make the infrastructure more transparent, so if an incident or breach occurs, it can be audited or investigated easily. With the new File Integrity Monitor functionality, security specialists can track actions performed with specified files and foldersand make sure no alteration of files goes unnoticed. The new version also enables Log Inspection for analyzing activity within a protected system, identifying breaches or abnormal behavior and saving logs for further analysis. With addedSIEM integration, the solution can nowalso export application logs to the corporate Security Operation Center. All these technologies provide security teams and external auditors with the toolsthey need to ensure that the infrastructure is compliant and secure.

Even while traditional and widely-used malware can make the low-end hardware and obsolete operating systems often found in embedded systems, an easy target, there are also more sophisticated threats – such as fileless malware that operates in memory. To address these threats, Kaspersky Embedded Systems Security ensures security at both file and memory level with real-time anti-malware protection, on-demand scan and Proccess Memory protection.

Additional security features include USB/CD/DVD access control and centralized firewall management along with Default Deny modethat blocks attempts to run any unauthorized executable code or drivers on ATMs and POS terminals.

“Enterprise-grade organizations, especially in the financial industry,will be under increasing regulatory pressure in the next year, considering the recent rise in incidents with critical embedded systems, like ATMs and POS terminals. Currently, they need to implement several protection tools to meet requirements. To help, we’re offering a dedicated single solution with complete functionality, including File Integrity Monitor and Log Inspector, to address the many protection and compliance concerns of our customersat once,”

said Dmitry Zveginets, Solution Business Lead, Kaspersky Lab.

To learn more about Kaspersky Embedded Systems Security,visit our corporate website. The solution is available globally as a part of Kaspersky Lab’s enterprise portfolio.