Bit9

Skip Navigation

Enterprise Application Whitelisting

Current Articles | RSS Feed RSS Feed

Best security practice for POS terminals

Posted by Mario Vuksan on Mon, Jul 21, 2008
Digg digg it | Reddit reddit | del.icio.us del.icio.us | StumbleUpon StumbleUpon 
Thinking back about Dave & Buster's breach. People are saying that protocol obfuscation made possible by vendors like Arxan, VI Labs and Cloakware would fix these flagrant theft attempts. Dave & Buster's & Hannaford Bros data was stolen because their wireless data was being transmitted in the clear. What has not been told is that systems were compromised with backdoors and unauthorized sniffing software. Had that not been the case, attackers would not have had the chance to get to the data in the first place. This is the ancient debate of should I secure the network or the endpoint?  I would argue that you need to do both. Endpoint systems like POS terminals have to be pristinely clean. Application whitelisting helps here immensely. Imagine, what could be the purpose of unauthorized components on such a system?

Tags: 

COMMENTS

As far as my experience in concerned , i feel wireless data must be encrypted. Data hacking is much easier when it is over the air. The key lenghth is also important. Till now i feel POS systems are using very minimal level of security which will be dangerous very soon.

posted @ Monday, July 21, 2008 11:27 PM by kishalay


Clearly some of past and recent data breaches were caused by basic social engineering or a lack of basic host based security monitoring. Where we see software protection advantages is in giving POS software providers and other vendors a capability to protect application integrity independent of where software is deployed. This would not stop a hacker with administrator privileges installing a packet sniffing software, but would prevent malware or remote attempts to hook or tamper with the application at runtime. This is a real threat vector today, but unfortunately hackers have much simpler methods at their disposal as shown Dave & Buster's scenario, so a layered approach makes a lot of sense. 
 
 
 
Vic DeMarines 
 
V.i. Labs 
 

posted @ Tuesday, July 22, 2008 8:17 AM by Vic DeMarines


We all agree that having a good seatbelt and bad brakes is not a viable approach to security. One does not need to conjure impossible solutions, yet a layered approach can certainly be very effective. If you lockdown the endpoint, make sure you use SSL and a protected application, even an educated intruder with admin privileges will find it extremely hard to steal the data. 
 

posted @ Tuesday, July 22, 2008 11:02 AM by Mario Vuksan


Post Comment
Name
 *
Email
 *
Website (optional)
Comment
 *

Allowed tags: <a> link, <b> bold, <i> italics

Receive email when someone replies.

Subscribe by Email

Your email:

Browse by Tag


Hubspot Site Analysis