|
|
|
News  
Solidcore releases self-service security software 18 Aug 2008 CUPERTINO, Calif. — Solidcore Systems Inc., a provider of software to detect and prevent unwanted change, has released POS Check and Control for easily securing and controlling distributed retail point-of-service systems and kiosks. The solution is based on Solidcore's "runtime control" technology that is designed to solve the rigors of POS security, malware protection and Payment Card Industry Data Security Standard compliance with minimal system and operational overhead.
Solidcore protects nearly 100,000 POS systems worldwide. Unlike application whitelisting, host intrusion prevention systems and antivirus, Solidcore provides runtime control capabilities that deliver comprehensive security with low overhead. Runtime control ensures only pre-authorized software and code can run on POS systems while securely allowing software updates from trusted sources, such as those generated by retail coupon engines. Solidcore's runtime control also prevents disk tampering, and provides advanced memory protection to authorized software to defend against buffer overflow vulnerability attacks and zero-day exploits.
"Financially motivated, targeted attacks are definitely focusing on POS systems," said John Pescatore, vice president and analyst for Gartner. "As with all business-critical systems, merchants must ensure they start with secure POS software and configurations, and then implement and enforce strong change control and vulnerability management processes to make sure that only authorized updates are allowed."
A retailer can use Solidcore's POS Check and Control to quickly validate field-deployed POS images against a gold image standard. Once POS systems are established as "clean" systems, Solidcore's runtime control works to prevent any malicious code or other unauthorized programs from executing. This unique security solution will allow an in-store technician to login as an administrator and perform routine maintenance while simultaneously preventing that technician from adding to or tampering with the set of software that is authorized to execute on the POS device. This level of protection extends across all forms of access, from network to USB key.
Once secure, POS Check and Control reports on POS system changes in real-time for continuous PCI DSS compliance verification. This includes providing continuous information about change events such as who is making changes, where changes were made, when the change was made, how the change was implemented and what content changed.
"With both margin pressure and the number of publicized and unpublicized data breaches on the rise, retailers cannot afford to cobble together combinations of audit, antivirus and list-based security tools on their critical POS systems," said Anne Bonaparte, president and chief executive of Solidcore. "POS Check and Control goes beyond the security flavor-of-the-week by giving retailers the power to ensure their POS systems remain secure and only change when the merchant wants them to."
©2008 NetWorld Alliance LLC. All rights reserved.
|
|
|
|
|
