KASPERSKY EMBEDDED SYSTEMSSECURITY
All-in-one security designed for Embedded systems

The threat environment is advancing exponentially, putting critical business processes,
confidential data and financial resources at ever-increasing risk from zero-second attacks.
To mitigate the risk to your business, you need to be smarter, better equipped and better
informed than the cyber-professionals targeting you.
Today we see Embedded systems everywhere: in ticketing machines, ATMs, kiosks, Pointof Sale systems, medical equipment… the list goes on. Embedded systems are a particular
security concern as they tend to be geographically scattered, challenging to manage andrarely updated. They have to be fault tolerant and resistant, operating as they do withcash and with credit card credentials. Embedded devices must not just be protected against
threats in themselves, but must not be accessible by cybercriminals or an inside attacker as
an entry point into the corporate network.
Standard security regulations for Embedded devices tend to cover only antivirus based
security or system hardening, which is not enough. A purely antivirus approach is of limited
effectiveness against current Embedded systems threats, as has been amply demonstrated
in recent attacks. Now is the time to apply well-proven technologies like Device Controland Default Deny, with an additional Antivirus module applied to critical systems whererequired.

SOLUTION HIGHLIGHTSLOW-END HARDWARE
Kaspersky Embedded Systems Security has been built
specifically to operate effectively even on low-end
hardware. Efficient design delivers powerful security
with no risk of systems overload.
WINDOWS XP OPTIMIZEDThe majority of Embedded systems still run on thenow unsupported Windows® XP family OS. Kaspersky
Embedded Systems Security has been optimized to run
with full functionally on the Windows XP platform as
well as the Windows 7, Windows 2009 and Windows
10 families.
ISOLATED, SECURED, NETWORK-READY
Malware signatures can be updated automaticallythrough the internet, or manually for the isolated
secured networks typical of Embedded systems.
With ‘Default Deny only’ installation, no updates
are needed.

POWERFUL THREAT INTELLIGENCE
Based on unequalled sources of real-time threat
intelligence, our technologies continually evolve
to protect your business from even the latest, mostsophisticated threats, including zero-day exploits. Byaligning your security strategy with the world leadersin advanced threat discovery, you are choosing toadopt best of breed endpoint protection, now andin future. There is no better security posture for yourorganization.
CENTRALIZED MANAGEMENT
Security policies, signature updates, antivirus scans
and results collection are easily managed througha single centralized management console – Kaspersky
Security Center. All the agents in a local area network
can be managed through any local console – parti­
cu­larly valuable when working with the isolated,segmented networks typical of Embedded systems.

Default Deny
The last 10 years has seen an increase in malware developed specifically to attack Embedded systems, including
Tyupkin, Skimer, Carbanak and their families. Most traditional antivirus solutions cannot fully defend against such
advanced, targeted, malware threats. A classical antimalware solution is not effective against the many targeted
threats which are not based on malware, but use insiders’ middleware in a different attack approach. Default Denyfunctionality means that no executable files, drivers and libraries, other than software protection, can run without
approval from the Security Administrator.

Device Control
Device Control from Kaspersky Lab gives you the ability to control USB storage devices connected or trying
to connect physically to systems hardware. Preventing access by unauthorized devices means you block a key
point of entry, used regularly by cybercriminals as the first step in a malware attack.

Windows XP – Windows 10 Ready
After 12 years, support for Windows XP Embedded ended on January 12, 2016 and for Windows Embedded for
Point of Service on April 12, 2016. There will be no more security updates or technical support for the Windows XP
operating system. Kaspersky Embedded Systems Security provides 100% support for the Windows XP family.

Designed for Embedded Systems Hardware
Kaspersky Embedded Systems Security is designed to be fully effective on the low-end systems which are a featureof most Embedded systems hardware. Requirements start from only 256Mb RAM for the Windows XP family, witharound 50Mb space required on the system hard drive when operating in ‘Default Deny only’ mode. The antivirus
module is designed only to use hardware resources during manual or scheduled antivirus scans.

Antivirus and Kaspersky Security Network
Antivirus is provided as an optional module. Using a classic “antimalware approach” is impractical due to of thelimitations of low-end hardware, and is anyway largely ineffective in this unique threat landscape. Once Kaspersky
Embedded Systems Security is installed in Device Control and Default Deny mode, additional antivirus is notalways necessary, but can be added as a further security level where needed.
Kaspersky Lab also recommends applying intelligent security in the form of the Kaspersky Security Network
knowledge base, to prevent and mitigate exploit-based security risks and minimize reaction time.

EXE

OPTIMIZED EFFICIENCY - INTEGRATED MANAGEMENT
Kaspersky Embedded Systems Security provides yoursecurity teams with full visibility and control over every
Embedded node.
Infinitely scalable, the solution provides access toinventories, licensing, remote trouble-shooting andnetwork controls, all accessible from one console –the Kaspersky Security Center.
The security specialist can manage all agents within
an area network through any local console.

MAINTENANCE AND SUPPORTOperating in more than 200 countries, from 34 offices
worldwide, our 24/7/365 commitment to global support
is reflected in our Maintenance Service Agreement (MSA)
support packages.
Our Professional Services teams are on standby toensure that you derive maximum benefit from yourKaspersky lab security installation.
To learn more about securing your Embedded
systems more effectively, please visit
www.kaspersky.com/enterprise© 2016 Kaspersky Lab. All rights reserved. Registered trademarks and service marks are the property of their respective owners. Microsoft is a trademark of MicrosoftCorporation registered in the United States and/or elsewhere.