码迷,mamicode.com
首页 > 其他好文 > 详细

A glance at endpoint security

时间:2017-08-10 19:32:30      阅读:214      评论:0      收藏:0      [点我收藏+]

标签:png   kill   like   values   ram   ranch   fail   cat   lan   

Last year hackers stole millions from Taiwan First Commercial bank‘s ATMs without using a card. This was absolutely a premeditated attack. Hackers "broke into" the voice recording server of First Bank‘s London branch. They started to gain administrator privillege of servers and workstations. Finally they manipulated those ATMs to spit out cash successfully. Suspects were caught at last oweing to three factors:

1.Taiwanese law-enforcement authorities(indluding skillful forensic examiner from MJIB,CIB, etc)
2.vast network of security cameras
3.sharp-eyed and enthusiastic citizens

 

How to improve endpoint security is a very important issue. Take ATM for example, ATM is like a self service kiosk. Customers can access their bank deposit or credit accounts conveniently. As long as these ATMs are up and running, IT administrators seldom pay attention to these ATMs.They‘d like to spend time on banking systems and servers.

 

So how to keep ATMs safe and sound? My suggestion is to deploy some security machanism like "Trend Micro SafeLock". It could prevent intrusion and execution of any executable programs not on the whitelist. If you try to run a .exe not on the approved list, Safe Lock will block it and you will see a error message popup as below.

技术分享

 

 

The keypoint is "hash value". Safe Lock will scan and calculate hash values of files in this computer. Administrators could do approved list managemnt easily.

技术分享

 

技术分享

 

Look at the event log and you could know what suspecious application blocked by Safe Lock, including the applcation name, full path and date.Even the exe running in command prompt could be detected and blocked with fail.

技术分享

技术分享

 

A glance at endpoint security

标签:png   kill   like   values   ram   ranch   fail   cat   lan   

原文地址:http://www.cnblogs.com/pieces0310/p/7340713.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!