ULTIME NEWS: Gyala riconosciuta Sample Vendor nel documento “Emerging Tech: AI in CPS Security” di Gartner Leggi

CASE STUDY

Cybersecurity for Protecting Bank ATMs

Protecting ATMs from cyberattacks and ensuring the security of banking transactions.

Discover Agger Finance

Background

A historic bank with a vast network of branches, primarily in Northern Italy. The institution expressed the need to protect its ATMs from potential cyber threats, ensuring security both at a physical and digital level.

ATMs are a critical infrastructure for the banking sector and are increasingly targeted by cyberattacks aimed at compromising transaction security, accessing sensitive data, and disrupting service availability.

The convergence of IT and OT in banking has made it necessary to adopt advanced cybersecurity solutions to protect both the physical devices and the communication networks to which ATMs are connected. Additionally, many of these machines operate on legacy systems, which are often non-upgradable, increasing vulnerability risks.

Results Archived

  • Guaranteed security for all ATMs across the bank’s branch network.
  • Elimination of successful attacks through proactive protection implementation.
  • Compliance with European and national cybersecurity regulations.
  • Reduction in operational costs related to IT security management for ATMs.

Needs

  • Protect ATMs from both physical and cyber threats, ensuring continuous and secure operation.
  • Secure USB ports, network connections, and ATM software to prevent intrusions and tampering.
  • Safeguard the banking infrastructure connected to ATMs, preventing an attack on a single terminal from spreading to the entire branch network.
  • Develop a solution compatible with legacy systems, customized for the specific architecture of the ATMs.

Our Solution

We developed a tailored solution to protect the bank’s ATMs:

  • Development of custom agents specifically for ATMs, capable of securing USB ports, network connections, and the operating system from physical and digital attacks.
  • Implementation of customized detection and reaction rules to identify suspicious activities and respond in real-time.
  • Analysis and mapping of the banking infrastructure connected to ATMs to ensure network protection and prevent attack propagation.
  • Compatibility with legacy systems, ensuring operational continuity without requiring invasive hardware upgrades.

Benefits

  • 24/7 Detection and Reaction, overcoming the challenge of a lack of specialized personnel through customized agents.
  • Innovation and Resilience, a solution specifically designed for the needs of the banking sector.

Cost Optimization, thanks to an all-in-one solution.

Possible Regulatory Focus
  • DORA (Digital Operational Resilience Act): Requires financial institutions to implement advanced cybersecurity measures to protect digital infrastructures and prevent operational disruptions.
  • NIS2 Directive: Protects critical banking infrastructures from cyber threats.
  • GDPR Regulation: Ensures the protection of customers' sensitive data and banking transactions.

EBA (European Banking Authority) Guidelines: Defines security requirements for financial institutions in managing ICT risks.