PC/E Terminal Security. Effective protection against network and local attacks on your self-service systems



Similar documents
PC/E Self-Service. Net-centric software solution for the flexible integration of self-service systems in multichannel architectures

PC/E Monitoring ProView. Efficient IT service management for self-service networks

PC/E ATS Manager ProAKT. State-of-the-art ATS application for secure cash processes in the front office

PC/E Mobile Transaction Services. Cash transfers and cardless cash withdrawals via mobile phones

Automatic Scanning The checkout has evolved

Document ID. Cyber security for substation automation products and systems

Zone Labs Integrity Smarter Enterprise Security

AIRDEFENSE SOLUTIONS PROTECT YOUR WIRELESS NETWORK AND YOUR CRITICAL DATA SECURITY AND COMPLIANCE

PCI Data Security Standards (DSS)

Impact of Cybersecurity Innovations in Key Sectors (Technical Insights)

Security solutions White paper. Acquire a global view of your organization s security state: the importance of security assessments.

IBM Endpoint Manager for Core Protection

Need to be PCI DSS compliant and reduce the risk of fraud?

Protect Your Connected Business Systems by Identifying and Analyzing Threats

IBM Global Small and Medium Business. Keep Your IT Infrastructure and Assets Secure

Lifecycle Solutions & Services. Managed Industrial Cyber Security Services

AIRDEFENSE SOLUTIONS PROTECT YOUR WIRELESS NETWORK AND YOUR CRITICAL DATA SECURITY AND COMPLIANCE

Cybersecurity Awareness. Part 1

End-user Security Analytics Strengthens Protection with ArcSight

Beyond passwords: Protect the mobile enterprise with smarter security solutions

A Decision Maker s Guide to Securing an IT Infrastructure

Standard: Event Monitoring

Host-based Protection for ATM's

Internet Banking Internal Control Questionnaire

Kaseya White Paper. Endpoint Security. Fighting Cyber Crime with Automated, Centralized Management.

Symphony Plus Cyber security for the power and water industries

Introduction. PCI DSS Overview

User Help Desk Services. Customer oriented Service Desk for individual service and process design

BalaBit IT Security Insight Singaporean Internet Banking and Technology Risk Management Guidelines Compliance

Network Security. Tampere Seminar 23rd October Overview Switch Security Firewalls Conclusion

Symantec Protection Suite Enterprise Edition for Servers Complete and high performance protection where you need it

How To Buy Nitro Security

Desktop and Laptop Security Policy

SECURING YOUR SMALL BUSINESS. Principles of information security and risk management

case study Core Security Technologies Summary Introductory Overview ORGANIZATION: PROJECT NAME:

Banking Security using Honeypot

WICKSoft Mobile Documents for the BlackBerry Security white paper mobile document access for the Enterprise

PCI Solution for Retail: Addressing Compliance and Security Best Practices

Solution Brief for ISO 27002: 2013 Audit Standard ISO Publication Date: Feb 6, EventTracker 8815 Centre Park Drive, Columbia MD 21045

whitepaper 4 Best Practices for Building PCI DSS Compliant Networks

Managed Security Services

Guidelines for Web applications protection with dedicated Web Application Firewall

Top five strategies for combating modern threats Is anti-virus dead?

Data Sheet: Messaging Security Symantec Brightmail Gateway Award-winning messaging security for inbound protection and outbound control

Enterprise Cybersecurity Best Practices Part Number MAN Revision 006

HIPAA Compliance Evaluation Report

Protecting productivity with Plant Security Services

Endpoint Protection Small Business Edition 2013?

How To Manage A System Vulnerability Management Program

PCI DSS Reporting WHITEPAPER

Top Ten Technology Risks Facing Colleges and Universities

Readiness Assessments: Vital to Secure Mobility

The standard for professional project management from Wincor Nixdorf. Version 1.2

Attaining HIPAA Compliance with Retina Vulnerability Assessment Technology

CxBANKING SOFTWARE ATM CLIENT APPLICATIONS

Data Loss Prevention Program

Information Security Policy

E-BUSINESS THREATS AND SOLUTIONS

FORT HAYS STATE UNIVERSITY CREDIT CARD SECURITY POLICY

IBM Security QRadar SIEM & Fortinet FortiGate / FortiAnalyzer

White Paper Secure Reverse Proxy Server and Web Application Firewall

SCADA SYSTEMS AND SECURITY WHITEPAPER

Top 10 Anti-fraud Tips: The Cybersecurity Breach Aftermath

Protecting personally identifiable information: What data is at risk and what you can do about it

ProView. Remote monitoring and administration for self-service networks. Copyright Wincor Nixdorf International GmbH

1. Thwart attacks on your network.

THE SECURITY OF HOSTED EXCHANGE FOR SMBs

TOP 10 WAYS TO ADDRESS PCI DSS COMPLIANCE. ebook Series

Remote Services. Managing Open Systems with Remote Services

NCR APTRA Suite. The world s leading financial self-service software portfolio

Symantec Brightmail Gateway Real-time protection backed by the largest investment in security infrastructure

Protect the data that drives our customers business. Data Security. Imperva s mission is simple:

Reducing the cost and complexity of endpoint management

Achieving Compliance with the PCI Data Security Standard

BEST SECURITY PRACTICES IN ONLINE BANKING PLATFORMS

IBM Data Security Services for endpoint data protection endpoint data loss prevention solution

FIREMON SECURITY MANAGER

CloudCheck Compliance Certification Program

Information Technology Security Review April 16, 2012

PCI DSS Top 10 Reports March 2011

Antivirus and Malware Prevention Policy and Procedures (Template) Employee Personal Device Use Terms and Conditions (Template)

Threat Center. Real-time multi-level threat detection, analysis, and automated remediation

Transcription:

PC/E Terminal Security Effective protection against network and local attacks on your self-service systems

PC/E Terminal Security Criminals continue to find ever more sophisticated ways of manipulating or phishing for data. PC/E Terminal Security from Wincor Nixdorf guards against these attacks, providing proactive protection against potential system failure and loss of data. Retail banks need to meet customers' expectations for secure business processes in self-service environments. YOUR CHALLENGES Self-service terminals face danger Each week, new viruses, worms and cases of ATM software tampering make headlines. The resulting production downtime and the huge effort involved in remedying the damage generate high costs for ma - chine deployers. Above all, as the competition gets tougher, each case of data abuse harms a bank's image and makes it more vital than ever before to ensure reliable protection for security-relevant areas such as self-service. Threats to selfser vice systems come from external attacks as well as internal attempts at fraud. With the increasing speed at which malware such as viruses, worms and Trojans spreads, the weakest point of all is re sponse time to attacks. By the time experts have produced patches to close the security loopholes in virus scanners and firewalls, the malware may already be wreaking havoc. Retail banks are one of the scenarios in which criminals are finding it in creasingly easy to reach their goals, since the change from proprietary systems to web-based environments automatically makes the IT and its open interfaces more vulnerable. In addition to these external threats, the risk of internal fraud is also rising. In crea s - ingly, banks report attacks carried out as a result of unauthorized access to their systems. Modifications to and manipulation of the self-service system software and data represent massive risk potential. Retail banking is a field that requires protection of banks' sensitive, confidential data as well as access to cash.

Our solution: the functions Prevents unauthorized intrusion into self-service systems, both local and from the network Administration of access rights Configurable directory files Firewall protection: network, TCP/IP Protection for files and registers Protection from attacks carried out via removable media: CD-ROM, diskette, USB flash drive Runtime protection for processes and applications Protection against executables or graphics files Access protection: Secure user rights management Another benefit is that PC/E Terminal Se cu rity protects your systems from non-authorized access, and reliably closes all security loopholes during the Windows standard login. Its multi-stage model in volves assigning different users different rights. You can set this and other security features to suit the needs of your individual retail bank. In doing so, you build a seam less virtual access control screen around your bank's self-service systems and ensure protection that reliably deters intruders. OUR SOLUTION YOUR BENEFIT Intrusion protection keeps unauthorized users from accessing self-service systems Conventional products can only protect your systems from security deficiencies that they already know. That's why our so lu tion goes a vital step further: the innovative security mechanism in PC/E Terminal Security operates according to the behavior principle. What s so special about this? Our solution uses specific behavior patterns to detect anomalies in program flows. To make this possible, the predefined security policy indicates precisely who is authorized to access which areas and how. Our solution therefore identifies any activity that is not explicitly permitted and takes active steps to protect the system from it. At the same time, it logs de tails of any violations of security regulations. Our multivendor solution immediately class es malware as critical, and takes the steps needed to thwart its attacks. PC/E Terminal Security thus protects entire selfservice systems, including all their applications and operating systems. This applies to attempts made to tamper with the system over the network as well as to attacks carried out with local storage media such as CD-ROMs and USB flash drives, which enable GB-sized files to be transmitted in a matter of seconds. PC/E Terminal Security protects systems against modifications to the software itself, against deletion of sen sitive data and, of course, against intrusion of virus-infected software. A detailed history is available so that financial institutions can readily trace the source of every at tack. And since PC/E Terminal Security safeguards systems in the face of known as well as unknown threats, even 'day zero' attacks are now a thing of the past. Your benefits at a glance Comprehensive protection against Non-authorized access to self-service systems Attacks from the network and at local level Known and unknown threats Image protection and a competitive edge thanks to process and data security High productivity with protection for self-service systems in multivendor environments

Creating a protected environment To eliminate potential security risks right from the start, PC/E Terminal Security extends the standard security services provided by Microsoft operating systems, re placing them with its own login procedures. Our solution deactivates all redundant and non-required services. Network attacks Local attacks Self-service system Benefit from a holistic security concept that protects you from external as well as internal threats. Non-compliance can be costly When competition gets tough, complying with security regulations is not an optional luxury, it's a must! PC/E Terminal Security provides reliable support for the fulfillment of the numerous national and international regulations issued by various regulatory bodies, including the standards drawn up by the Payment Card Industry (PCI) and Common Criteria. Our intelligent software logs all user and system administrator ac tivities, manages them and details them in reports. This provides you with a full audit trail of accesses and events. In this way you protect your retail bank from fi nancial loss and enhance your bank s image as a trusted partner. With all-around protection for your self-service systems, you benefit from greater customer confidence and enhance your bank s image as a trusted partner. EXPANDING TO MEET THE FUTURE Comprehensive terminal protection PC/E Terminal Security offers you a single security solution that protects your entire terminal network. And since self-service systems represent most customers' preferred transaction channel, it is vital that you protect and optimize all business processes on your self-service systems. The mod ular structure of our PC/E Suite allows you to add other software products in the process. The self-service network's popularity depends primarily on its avail - ability, thus PC/E Monitoring or ProView allow you to manage and monitor your systems efficiently from a central point of administration. And with PC/E Cash Manage ment, you optimize your cash manage ment work across all the cash points in your branches and beyond. Strengthen the confidence your customers place in you with secure communications between self-service terminals and the host, as offered by our PC/E Key Loading Security software. With the Terminal Security solution pack - ages from Professional Services, we support you in your security activities from process optimization to IT integration and se cure operation of your solution.

Intelligent software means improved processes The PC/E Retail Banking Solution Suite offers you an IT architecture that optimizes your sales and service processes in the front office, for a decisive edge that ensures a successful future. Security offers a holistic security strategy that protects a retail bank s IT sys tems and networks as well as its internal and external communications. The PC/E architecture open to the future Our solution is based on an open, netcentric multichannel architecture that is de signed to be service-oriented. Individual modules, called Business Services, can be used in any channel. This enables you to customize your retail bank's business processes. OUR PC/E SUITE New IT concepts for retail banks The sector: The main pillars of traditional banking business are crumbling; their prof itability can no longer be regarded as stable, let alone rising. This is due in part to flex ible customers, who are quick to change banks when they have a better offer else where. Market liberalization makes this flex ibility possible; thus, the winner is the bank that succeeds in ap pealing to consumers' emotions and staying one step ahead of the competition. However, the generally complex, heterogeneous IT ar chitecture of most financial institutions does not support this strategy or the processes it requires. PC/E Retail Banking Solution Suite: new momentum for sales and service Your chances on the market hinge upon the right strategy. Front office service and sales play a key role, and here our modular PC/E Retail Banking Solution Suite covers a wide array of topics. What are the strengths of this software package? It concentrates completely on the front of - fice, enabling the transformation of your business processes and the associated IT architecture into a future-proof retail banking. The modular software suite that lets you do more Channel Delivery comprises solutions for retail banks' delivery channels, making all your processes uniform, transparent and holistic for your customers, whatever channel they use. Banking Business Enabling consists of modules for the sales and service processes of all these channels. Thanks to its mul tichannel concept, these business processes can be flexibly integrated. Management & Optimization shows you how Wincor Nixdorf manages and optimizes retail banking processes and reduces operating costs. Added value from an IT perspective... Reusability Rapid integration Expandability Added value from a business perspective... Increase in profitability Reduction in costs Investment protection and futureproofness "Emotionalization" of retail banking From the very first draft, our Professional Services support you with well-founded, precise consulting. In the case of IT integration, this can range all the way to outsourcing.

Published by Wincor Nixdorf International GmbH Heinz-Nixdorf-Ring 1 33106 Paderborn, Germany Phone +49 (0) 52 51 / 693-33 01 Fax +49(0)5251/693-5918 www.wincor-nixdorf.com info.banking@wincor-nixdorf.com Wincor Nixdorf International GmbH All product names are registered trademarks of Wincor Nixdorf International GmbH. All rights reserved, particularly in relation to the grant of a patent or the registration of a utility model. Subject to availability and technical modifications. Order-No. R-11051-J-Z740-2-7600 Printed in Germany, January 2010, w