Lista często zadawanych pytań

Yes. Dr.Web ATM Shield can be used not only for conventional OSs—Windows® XP Professional, Windows® Vista, Windows® 7 and Windows® 8—but also for Windows® XP Embedded, Windows® 7 Embedded, and Windows® 8 Embedded.

It must be remembered that some devices may lack various operating system components. This is a feature of Embedded OSs.

Dr.Web ATM Shield was developed with low-end platforms in mind¬¬¬. Dr.Web ATM Shield can run on an embedded device with just 512 MB of RAM.

It should be noted that Dr.Web products, including Dr.Web ATM Shield, are distinguished by compact virus databases and small size updates that make it possible to protect remote devices with ‘narrow’ Internet channel or a company network.

Dr.Web ATM Shield conforms to the anti-virus program requirements of the Federal Law on Personal Data (No. 152-FZ), FSTEC Russia’s orders No. 17 and No. 21, and other regulatory demands in the sphere of personal data protection.

When applied, Dr.Web ATM Shield meets the anti-virus program requirements of PCI DSS v2.0 and v3.0 standards.

PCI DSS standards require only the fact that an anti-virus is being used and don’t make any claims about the functionality and features of the solution being used. Moreover, these standards stipulate the requirements for protecting devices in general, not their separate components. Therefore, the certificate isn’t provided for anti-viruses.

‘But Symantec has a PCI DSS certificate of compliance!’

Symantec has more than just anti-viruses in its portfolio. And the certificate you mentioned doesn’t belong to anti-virus software.

A peculiarity of the way embedded devices work (including ATMs) is that you cannot carry out updates (specifically, updates to the OS and applications launched on them) on them that may at some point require a device reboot as soon as update data is available — even if the system is busy.

Therefore, Dr.Web ATM Shield has two types of updates: virus database updates (that don’t require system restarts) and updates for Dr.Web ATM Shield’s basic components, including the drivers. Basic components updates, carried out when new types of malicious programs appear, may require a reboot of the protected device.

Because updates that potentially require a system restart can only be carried out during routine maintenance checks, it’s essential for employee home and work PCs to be protected by an anti-virus in order to prevent the newest malicious programs from penetrating removable data-storage devices used for routine maintenance.

The following routes of infection are typical for embedded systems:

• An infected company intranet, if embedded systems can be accessed from it;
• Vulnerabilities that exist due to the absence of security updates;
• Employee removable data-storage devices (including those that have been used for purposes other than embedded systems maintenance);
• Hacker-owned removable data-storage devices, if the hackers have unauthorized access to ATM equipment compartments;
• Internet sites visited by company personnel during maintenance periods.

Therefore, anti-virus protection that includes a traffic control module and an access restriction module for removable data-storage devices and Internet resources is essential for embedded systems to operate normally.

Dr.Web ATM Shield is required in all embedded devices that are subject to the requirements of PCI DSS and STO BR RF, and in all systems that can be infected through unknown vulnerabilities.