Kaspersky Enterprise Cybersecurity

KESS 2.0 What’s newTop 5
Memory protection
Protects the process memory
from vulnerabilities

Kaspersky Embedded Systems Security now protects the process memory
against exploits A dynamically loaded Process Protection agent is inserted
into protected processes, monitoring their integrity and reduce the risk ofvulnerabilities being exploited.

File integrity monitor (FIM)
Audits file changes that may
indicate a security breachon the protected computer

The File Integrity Monitor task tracks actions performed by specified files
and folders in the monitoring scope. You can also configure file changes
to be tracked during periods when monitoring is interrupted.

Log inspection
Analyzes activity within a protected
system via the Windows Event Log

Kaspersky Embedded Systems Security now monitors the integrity of the protectedenvironment based on inspecting Windows Event Logs. The application notifies theadministrator on detecting abnormal behavior that may indicate attempted cyber-attacks.
The solution examines the Window event log and identifies breaches based on rules
specified by the user or by Heuristic Analyzer settings used by the task to inspect logs.

SIEM integration
Exports application logs to theexternal Security Informationand Event Management (SIEM)
systems via the syslog protocol

Kaspersky Embedded Systems Security can now convert events in application logs intoformats supported by the syslog server, so these can be transmitted and successfullyrecognized by SIEM.

USB connections monitoring
Notifications about all theconnections to a protectedcomputer via the USB ports
for various device types

Kaspersky Embedded Systems Security can control USB storage devices. In version
2, all USB device connections are monitored for further analysis. InappropriateUSB use can be detected as a possible attack source or during the incident
investigation and response processes.

Powerful Threat Intelligence
Based on unequalled sources of realtime threat intelligence, our technologies
continually evolve to protect your businessfrom even the latest, most sophisticatedthreats, including zero-day exploits. By aligning
your security strategy with the world leaders inadvanced threat discovery, you are choosing
to adopt best of breed endpoint protection,
now and in future. There is no better security
posture for your organization.
Centralized ManagementSecurity policies, signature updates, antivirus
scans and results collection are easily
managed through a single centralized
management console – Kaspersky Security
Center. All the agents in a local area network
can be managed through any local console –particularly valuable when working with theisolated, segmented networks typical ofEmbedded systems.
Optimized Efficiency –Integrated Management
Kaspersky Embedded Systems Security
provides your security teams withfull visibility and control over every
Embedded node.
Infinitely scalable, the solution provides
access to inventories, licensing, remotetrouble-shooting and network controls,
all accessible from one console – theKaspersky Security Center.
The security specialist can manage allagents within an area network throughany local console.
Maintenance And Support
Operating in more than 200 countries,
from 34 offices worldwide, our 24/7/365
commitment to global support isreflected in our Maintenance Service
Agreement (MSA) support packages.
Our Professional Services teams areon standby to ensure that you derive
maximum benefit from your Kaspersky Lab
security installation.
To learn more about securing yourEmbedded systems more effectively,
please visit www.kaspersky.com/
enterprise

ExpertAnalysis

HuMachine™

Firewall and CD/DVD management
Due to the nature of some embedded systems attacks, protection against
malicious insider activity is essential. Embedded systems operating outside
the domain perimeter must always be protected by centrally managed Device
Controls for both internal CD/DVD and USB storage drives, as well as by a firewall.

Windows XP – Windows 10 Ready
After 12 years, support for Windows XP Embedded ended on January 12, 2016 andfor Windows Embedded for Point of Service on April 12, 2016. There will be nomore security updates or technical support for the Windows XP operating system.
Even more importantly, most leading endpoint security vendors are also nowending their support of Windows XP. Kaspersky Embedded Systems Security
is absolutely committed to providing 100% support for the Windows XP family,
for the foreseeable future.

Designed for Embedded Systems
HardwareKaspersky Embedded Systems Security is designed to be fully effective on
the low-end systems which are a feature of most Embedded systems hardware.
Requirements start from only 256Mb RAM for the Windows XP family, with around
50Mb space required on the system hard drive when operating in ‘Default Deny
only’ mode. The antivirus module is designed only to use hardware resources
during manual or scheduled antivirus scans.

Antivirus and Kaspersky Security Network
Antivirus is provided as an optional module. Using a classic “antimalware approach”
is impractical due to of the limitations of low-end hardware, and is anyway largely
ineffective in this unique threat landscape. Once Kaspersky Embedded Systems
Security is installed in Device Control and Default Deny mode, additional antivirus
is not always necessary, but can be added as a further security level where needed.
Kaspersky Lab also recommends applying intelligent security in the formof the Kaspersky Security Network knowledge base, to prevent and mitigate
exploit-based security risks and minimize reaction time.

EXE

Kaspersky Lab
Enterprise Cybersecurity: www.kaspersky.com/enterprise
Cyber Threats News: www.securelist.com
IT Security News: business.kaspersky.com/#truecybersecurity#HuMachinewww.kaspersky.com
MachineLearning

Big Data /Threat Intelligence© 2017 AO Kaspersky Lab. All rights reserved. Registered trademarks and service marks are the property of
their respective owners. Microsoft is a trademark of Microsoft Corporation registered in the United States and/or elsewhere.