kaspersky embedded systems security

kaspersky embedded systems security
All-in-one security designed for Embedded systems
The threat environment is advancing exponentially, putting critical business processes,
confidential data and financial resources at ever-increasing risk from zero-second attacks.
To mitigate the risk to your business, you need to be smarter, better equipped and better
informed than the cyber-professionals targeting you.
Today we see Embedded systems everywhere: in ticketing machines, ATMs, kiosks, Point
of Sale systems, medical equipment… the list goes on. Embedded systems are a particular
security concern as they tend to be geographically scattered, challenging to manage and
rarely updated. They have to be fault tolerant and resistant, operating as they do with
cash and with credit card credentials. Embedded devices must not just be protected against
threats in themselves, but must not be accessible by cybercriminals or an inside attacker as
an entry point into the corporate network.
Standard security regulations for Embedded devices tend to cover only antivirus based
security or system hardening, which is not enough. A purely antivirus approach is of limited
effectiveness against current Embedded systems threats, as has been amply demonstrated
in recent attacks. Now is the time to apply well-proven technologies like Device Control
and Default Deny, with an additional Antivirus module applied to critical systems where
Kaspersky Embedded Systems Security has been built
specifically to operate effectively even on low-end
hardware. Efficient design delivers powerful security
with no risk of systems overload.
The majority of Embedded systems still run on the
now unsupported Windows® XP family OS. Kaspersky
Embedded Systems Security has been optimized to run
with full functionally on the Windows XP platform as
well as the Windows 7, Windows 2009 and Windows
10 families.
Malware signatures can be updated automatically
through the internet, or manually for the isolated
secured networks typical of Embedded systems.
With ‘Default Deny only’ installation, no updates
are needed.
Based on unequalled sources of real-time threat
intelligence, our technologies continually evolve
to protect your business from even the latest, most
sophisticated threats, including zero-day exploits. By
aligning your security strategy with the world leaders
in advanced threat discovery, you are choosing to
adopt best of breed endpoint protection, now and
in future. There is no better security posture for your
Security policies, signature updates, antivirus scans
and results collection are easily managed through
a single centralized management console – Kaspersky
Security Center. All the agents in a local area network
can be managed through any local console – parti­
cu­larly valuable when working with the isolated,
segmented networks typical of Embedded systems.
Default Deny
The last 10 years has seen an increase in malware developed specifically to attack Embedded systems, including
Tyupkin, Skimer, Carbanak and their families. Most traditional antivirus solutions cannot fully defend against such
advanced, targeted, malware threats. A classical antimalware solution is not effective against the many targeted
threats which are not based on malware, but use insiders’ middleware in a different attack approach. Default Deny
functionality means that no executable files, drivers and libraries, other than software protection, can run without
approval from the Security Administrator.
Device Control
Device Control from Kaspersky Lab gives you the ability to control USB storage devices connected or trying
to connect physically to systems hardware. Preventing access by unauthorized devices means you block a key
point of entry, used regularly by cybercriminals as the first step in a malware attack.
Windows XP – Windows 10 Ready
After 12 years, support for Windows XP Embedded ended on January 12, 2016 and for Windows Embedded for
Point of Service on April 12, 2016. There will be no more security updates or technical support for the Windows XP
operating system. Kaspersky Embedded Systems Security provides 100% support for the Windows XP family.
Designed for Embedded Systems Hardware
Kaspersky Embedded Systems Security is designed to be fully effective on the low-end systems which are a feature
of most Embedded systems hardware. Requirements start from only 256Mb RAM for the Windows XP family, with
around 50Mb space required on the system hard drive when operating in ‘Default Deny only’ mode. The antivirus
module is designed only to use hardware resources during manual or scheduled antivirus scans.
Antivirus and Kaspersky Security Network
Antivirus is provided as an optional module. Using a classic “antimalware approach” is impractical due to of the
limitations of low-end hardware, and is anyway largely ineffective in this unique threat landscape. Once Kaspersky
Embedded Systems Security is installed in Device Control and Default Deny mode, additional antivirus is not
always necessary, but can be added as a further security level where needed.
Kaspersky Lab also recommends applying intelligent security in the form of the Kaspersky Security Network
knowledge base, to prevent and mitigate exploit-based security risks and minimize reaction time.
Kaspersky Embedded Systems Security provides your
security teams with full visibility and control over every
Embedded node.
Infinitely scalable, the solution provides access to
inventories, licensing, remote trouble-shooting and
network controls, all accessible from one console –
the Kaspersky Security Center.
The security specialist can manage all agents within
an area network through any local console.
Operating in more than 200 countries, from 34 offices
worldwide, our 24/7/365 commitment to global support
is reflected in our Maintenance Service Agreement (MSA)
support packages.
Our Professional Services teams are on standby to
ensure that you derive maximum benefit from your
Kaspersky lab security installation.
To learn more about securing your Embedded
systems more effectively, please visit
© 2016 Kaspersky Lab. All rights reserved. Registered trademarks and service marks are the property of their respective owners. Microsoft is a trademark of Microsoft
Corporation registered in the United States and/or elsewhere.
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF