Dr.Web ATM Shield

Download
Ask for demo
Buy online
Buy from partners

The first virus for ATMs was discovered in Russia in March 2009. It was capable of stealing money from accounts of card bearers and making an ATM give away all the cash to the criminal. This threat was implemented as a Trojan horse that collected information about credit cards and their PIN codes. Compromised ATMs were first found in Moscow and later in St. Petersburg.

In response to the threat Doctor Web created a special anti-virus for centralized real time protection of embedded systems (ATM, POS networks, multi-kiosks, etc.) – Dr.Web ATM Shield. The anti-virus for ATMs is based on Doctor Web’s flagship product Dr.Web Enterprise Security Suite and incorporates features, control tools and the architecture of ES. Dr.Web ATM Shield can be easily integrated into an ATM or POS network. It significantly reduces devices' maintenance time and system administrators’ workload.

Centralized anti-virus solution

Dr.Web ATM Shield is client-server software. Clients are installed into embedded systems while the anti-virus server provides centralized administration of clients including their deployment, updating of virus databases and software components, monitoring of the network protection status, receiving notifications on virus incidents, collection of statistics. Server installation and anti-virus network deployment procedures are fairly simple and take little time. The server and clients can connect over TCP/IP (including IPv6 and IPv6), IPX and NetBIOS.

With the hierarchical multi-server Dr.Web ATM Shield protection system, where interconnected servers provide resources for a single anti-virus network and centralized collection of information about the entire network, this product is the best choice for multi-affiliated banks. This highly scalable solution can be deployed in networks of different size and topology ranging from several connected embedded computer systems to complex distributed networks connecting dozens of thousands of hosts. The scalability is achieved by implementation of the grouping mechanism that allows joining several anti-virus servers and a database SQL server into one group with complex interaction structure for group members.

Dr.Web ATM Shield allows an administrator to centrally control all components of the anti-virus network from inside the network or remotely over the Internet, monitor security status of all protected hosts, receive notifications on virus incidents and configure automatic response of the anti-virus to such events. All you need is a TCP/IP connection between the administrator’s computer and the anti-virus server.

Easy deployment and administration, flexible configuration of client installer packages, quick and efficient distribution of virus databases’ updates between clients without additional configuration and update schedules are among numerous advantages of Dr.Web ATM Shield.

Benefits

• easy integration with ATMs and TCDs resulting in a significant reduction of devices' maintenance time;
• centralized control over all components of the anti-virus;
• easy scalability allows using the solution in networks with an unlimited number of hosts ((hierarchical anti-virus network);
• multi-platform server software – server software can be installed in a Unix-like operating systems as well as on a Windows computer;
• TCIP/IP, IPX/NetBIOS support;
• Support of various types of DBMS to use with the anti-virus server;
• minimal network traffic based on a specifically-designed data transfer protocol for TCP-IP networks;
• Low network traffic achieved by using a special optimized protocol supporting data compression between clients and a server;
• option to encrypt communication between different components of the system;
• monitoring security of all protected hosts in the network;
• centralized collection of statistics on virus incidents;
• critical anti-virus server data backup;
• transparent operation – administration audit log keeps record of all installation and configuration activities.

• Banks bear no losses due to viral activities in ATMs;
• There are no outages caused by viruses;
• The system administrator gets more time for other tasks.

System requirements

Server

• a computer with Pentium III-667 CPU or faster
• at least 128 MB RAM (256 MB if the internal database is used)
• 1 GB free disk space (20 MB for executable files, the rest - for logs and the built-in database)
• Windows NT 4.0/2000/XP/2003/2008, Linux, Free BSD (6.2 - 7.1), Solaris (x86 and Sparc) - for 32- and 64-bit systems;
• TCP/IP network

Agents

• at least 40 MB of free disk space
• PC running MS 7/2008/Vista/2003/XP Professional/2000/NT 4.0/ ME/ 98/95 (32- and 64-bit systems).

Licensing

The product is licensed per number of protected embedded devices connected to the Dr.Web ATM Shield server. If a multi-server anti-virus network needs to be deployed, a separate license should be purchased for each server and a corresponding number of connected devices should be specified for each server.