VISA CISP Bulletin
In August of 2006, VISA, Inc., a leader and originator of PCI Data Security Standards (PCI DSS), released a report on the top three POS vulnerabilities.
Their research revealed the following POS vulnerabilities:
- Remote Access Security-Command-line based and visually driven software packages, such as pcAnywhere or MS Remote Desktop. These remote solutions offer a "back door," which makes them easy targets for hackers.
- Host Security-Usually considered the Host computer, which is the central repository for payment data, authorization, data backup and other management functions. The Host computer is the most vulnerable for intrusion, via the network infrastructure.
- Network Security -Securing and monitoring the network, including activity logging and correct configuration, along with proper encryption and special attention to changing the default passwords within a wireless network environment.
Print this page
Send this page to a friend
|