A glance at endpoint security
Last year hackers stole millions from Taiwan First Commercial bank's ATMs without using a card. This was absolutely a premeditated attack. Hackers "broke into" the voice recording server of First Bank's London branch. They started to gain administrator privilege of servers and workstations. Finally they manipulated those ATMs to spit out cash successfully. Suspects were caught at last oweing to three factors:
1.Taiwanese law-enforcement authorities(indluding skillful forensic examiner from MJIB,CIB, etc)
2.vast network of security cameras
3.sharp-eyed and enthusiastic citizens
How to improve endpoint security is a very important issue. Take ATM for example, ATM is like a self service kiosk. Customers can access their bank deposit or credit accounts conveniently. As long as these ATMs are up and running, IT administrators seldom pay attention to these ATMs.They'd like to spend time on banking systems and servers.
So how to keep ATMs safe and sound? My suggestion is to deploy some security machanism like "Trend Micro SafeLock". It could prevent intrusion and execution of any executable programs not on the whitelist. If you try to run a .exe not on the approved list, Safe Lock will block it and you will see a error message popup as below.
The keypoint is "hash value". Safe Lock will scan and calculate hash values of files in this computer. Administrators could do approved list managemnt easily.
Look at the event log and you could know what suspecious application blocked by Safe Lock, including the applcation name, full path and date.Even the exe running in command prompt could be detected and blocked with fail.
最新文章
- sqlserver行列转换问题（网上搜集）
- 基于RulesEngine的业务规则实现
- 【C语言入门教程】5.1 函数说明 与 返回值
- C# 枚举（enum）
- linux 2>&1
- context:exclude-filter 与 context:include-filter 转
- tcp 和 udp 缓冲区的默认大小及设置【转】
- easyui源码翻译1.32--ComboTree（树形下拉框）
- 走进C++程序世界------继承和派生
- Jquery操作-（多种实例）--未完
- English - in the light of(按照,根据）与according to的区别是什么
- on、where、having的区别(转载)
- 基于Android的手机程序----口袋理财(13年版)
- 好代码是管出来的——.Net Core中的单元测试与代码覆盖率
- react 入坑笔记（六） - 组件的生命周期
- maven打包不包含配置文件[z]
- py3中reduce
- linux shell 杂
- Linux下内存泄漏工具【转】
- linux中C语言发送广播报文