Kaspersky Enterprise Cybersecurity

Powerful protection specificallydesigned for automated control
systems and equipment runningon the Windows® OS family
Any automated terminal, whether controlling assembly line processes or orchestrating theflow of goods and traffic, is reliant on the stability and fault-tolerance of the embedded systemat its core. Should a device fail, or its performance be disrupted, the ‘knock-on’ effects can be
costly in terms of lost productivity and remediation.
It’s easy to forget, too, that these comparatively simple control systems generally sit on thecorporate network at some level, and so offer a potential access-point into your organization’s
overall IT infrastructure. So properly securing these systems is a must.
Insider activity is a key factor in the majority of attacks against embedded systems, and a purely
antivirus approach is of limited effectiveness where this is the case, as has been amply demonstrated in recent attacks.
Now is the time to apply approaches like
Device Control and Default Deny, alreadywell-proven technologies in other security
contexts, to protect your automatedoperational equipment and terminal based
systems against targeted malware attack,cyber-espionage from within, or simple
human error.

Kaspersky Lab Has Created a Solution
Specifically Designed for AutomatedControl Systems Running on Windows
Embedded Operating Systems
Default Deny
The last 10 years has seen an increase in malware developed specifically toattack embedded devices. Most traditional antivirus solutions cannot fully defend
against such advanced, targeted, malware threats when used alone. Default Denyfunctionality means that no executable files, drivers and libraries, other thansoftware protection, can run without approval from the Security Administrator.
Centralized Firewall management provides further enhanced security.

Device Control
Device Control from Kaspersky Lab gives you the ability to prevent an access byunauthorized USB data storage devices – a key point of entry used regularly bycybercriminals as the first step in a malware attack. Internal CD/DVD drives canbe controlled centrally even when they are outside of domain.

Optimised Efficiency –Integrated Management

WinXP ReadyKaspersky Embedded Systems Security
provides your security teams with fullvisibility and control over every embedded
device. Infinitely scalable, the solution
provides access to inventories, licensing,remote trouble-shooting and network
controls, all accessible from one console –the Kaspersky Security Center. The Security
Specialist can manage all agents within anarea network through any local console, avaluable facility when working with isolated
and segmented embedded systems as well
as operating systems and middleware
patch management.

After 12 years, support for Windows XP Embedded ended on January 12, 2016
with product End-of-life. There will be no more security updates or technicalsupport for the Windows XP operating system by Microsoft. Most security
vendors do not support Windows XP legacy systems. Kaspersky Embedded
Systems Security provides 100% support for the Windows XP family as standard.

Maintenance And Support
Operating in more than 200 countries,
from 34 offices worldwide, our 24/7/365
commitment to global support is reflectedin our Maintenance Service Agreement(MSA) support packages.
Our Professional Services teams are on
standby to ensure that you derive maximum
benefit from your Kaspersky Lab security
installation.
To learn more about securing your ATMand POS endpoints more effectively,
please contact the Kaspersky Lab
Enterprise Sales Team.

Designed for Embedded Systems Hardware
Kaspersky Embedded Systems Security is designed to be fully effective even onlow-end embedded systems hardware. Requirements start from only 256Mb RAM
for the Windows XP family, with around 50Mb space required on the system harddrive. When operating in ‘on-demand mode’, the antivirus module is designedto use hardware resources only during manual or scheduled antivirus scans.

Antivirus and Kaspersky Security Network
When an embedded system is protected with application control only, there isa serious risk of insider or malware based attack. Kaspersky Embedded Systems
Security delivers efficient antivirus protection, together with regular automaticor manual malware signature updates as required. As the majority of attacks onembedded systems are initiated through insiders’ activity, Kaspersky Lab also
recommends activating the Kaspersky Security Network knowledge base, toprevent and mitigate malware whitelisting and exploit-based attacks.

EXE

ExpertAnalysis

HuMachine™

DLL

Kaspersky Lab
Enterprise Cybersecurity: www.kaspersky.com/enterprise
Cyber Threats News: www.securelist.com
IT Security News: business.kaspersky.com/#truecybersecurity#HuMachinewww.kaspersky.com
MachineLearning

Big Data /Threat Intelligence© 2017 AO Kaspersky Lab. All rights reserved. Registered trademarks and service marks are the property of
their respective owners. Windows is a registered Trademark of Microsoft Corporation in the United Statesand other countries.