NCR APTRA Software Security

Relative to other channels, the automated teller machine (ATM) remains the most secure – despite the move towards open systems. The very technologies that enabled exciting new services over the ATM channel – open environments, Web technologies and new integrated services – also heralded the advent of malware such as viruses, worms and trojans. With NCR’s APTRA™ Software Security, ATMs are effectively ‘locked down’ against the risks in today’s environment, whether from a criminal at the ATM or through a network-based attack.

Other challenges come from three areas: emerging threats such as zero-day attacks; business risks, in the shape of rigorous PCI requirements; and internal threats, whether they arise from a lapse of control – when an operator applies a patch, change or update without appropriate testing, or through malicious attempts to damage or defraud your organization.

A unique, total software security solution
NCR addresses all four categories of ATM channel risk: traditional threats, emerging threats, business risks and internal threats. As part of the overall NCR APTRA Software Security, NCR has developed a simple, yet effective, unique approach to future-proofing and protecting the security of your ATM’s software environment. We have integrated  technology from Solidcore, the leading developer of IT control solutions, and tailored it to the unique requirements of the ATM environment.

Solidcore Suite for APTRA tackles the real underlying problem – the introduction from whatever source of unauthorized code. Solidcore Suite for APTRA's integrated technology only allows authorized code to run, protecting good code from being tampered with or hijacked.

NCR is determined to continue leading the industry in safeguarding the trust and integrity of the ATM channel. NCR APTRA Software Security is an excellent example of this determination.

Rather than continuing to devise ad-hoc fixes in the traditional fashion, NCR has taken the unprecedented step of addressing the underlying problem of unauthorized code, future-proofing the ATM channel once and for all. Also included is the capability to provide real-time audit information on exactly what changes have been made at any ATM.