Back
New search
Date

GMV collaborates in ATMIA´s ATM Software Security Best Practices Guide

01/10/2015



By publishing this guide GMV and the Security Council of the ATM Industry Association (ATMIA) are helping to raise awareness about the ATM cyberattack threat

GMV, as a member of the Security Council of the ATM Industry Association (ATMIA), has input its wealth ofcybersecurity experience for drawing up a Best Practices Guide to improve ATM security from cyberattacks. Juan Jesús León, Director of Products and New Developments GMV Secure e-Solutions, has guided the research work in the various working sessions called by ATMIA.

In León’s words: “Although ATM cyberattacks have been occurring for some years now, the affected banks have tended to hush them up”. As a result, “other banks were often deprived of the necessary information for proper protection of their own ATMs”.

The ATM Software Security Best Practices Guide gives a blow-by-blow account of 16 particular attacks around the world, analyzing exactly what happened in each case. The conclusion drawn from this is that these attacks did not, as has normally been claimed, stem from lack of system updates or support of the Windows operating systems. It explains how an ATM was completely cleared out of cash by using malware specifically designed for that purpose.

With this guide GMV and the other ATMIA members are helping to shed light on logical ATM attacks, explaining how they actually occur and helping cybersecurity officers to mitigate their risks.

Over the years GMV has built up a wealth of experience and expertise in cybersecurity, developing many specialized products like checker ATM Security, market leader in the protection of financial self-service systems, now protecting about 100,000 ATMs in over 15 countries. According to the Director of Products and New Developments GMV Secure e-Solutions, the key to Checker’s success is simple: “Protection without interference”. Checker is capable of exerting cast-iron control over the system using a single product, consuming hardly any resources and without affecting system availability. It is also multi-vendor software, installable in the whole range of equipment made by the various vendors.