News
New best practices guide tackles ATM software security threats
The new ATMIA manual advises deployers on security governance; software operational policies; threats to ATM networks; payments security and more.
October 9, 2014
The ATM Industry Association has released a new best practices guide for ATM software security. The manual is intended to help the industry combat security threats such as malware attacks, according to a news release from ATMIA.
"The release of version 3, which contains major updates to version 2.1, is very timely, especially in view of the significant rise in ATM malware attacks across several markets," said Douglas Russell of DFR Risk Management, who was technical editor and coauthor of the guide. Other contributors include Triton, GMV and Q-ATM.
The manual includes a survey of the current global ATM software environment, a description of the PCI framework for ATM software, and sections that address:
- ATM security governance;
- security and software operational policies;
- threats to ATM networks;
- physical and logical fraud;
- payments security; and
- the role of encryption.
Other chapters address the prevention of insider fraud, service interface protection for the ATM, relevant emerging technologies, and the detection and mitigation of malware and "black box" attacks.
Finally, the guide provides a checklist of recommendations for securing ATM operating software and an essay on the "Ten Immutable Laws of ATM Security."
"Every company in the industry should put into practice these security recommendations in order to prevent the spread of global malware attacks," ATMIA CEO Mike Lee said in the release.
Included In This Story
Triton Systems
Triton FI based products • NO Windows 10™ Upgrade • Secured locked down system that is virus/malware resistant • Flexible configurations - Drive-up and Walk-up • Triton's high security standards • NFC, anti-skim card reader, IP camera and level 1 vaults are all options • Triton Connect monitoring • Lower cost
