News | August 27, 2008

Solidcore Simplifies Retail Point-of-Service Security With POS Check And Control

CUPERTINO, Calif.--(BUSINESS WIRE)--Solidcore® Systems, Inc., the leading provider of software to detect and prevent unwanted change, today released POS Check and Control™ for easily securing and controlling distributed retail point-of-service (POS) systems and kiosks. The solution is based on Solidcore's "runtime control" technology that is designed to solve the rigors of POS security, malware protection and Payment Card Industry Data Security Standard (PCI DSS) compliance with minimal system and operational overhead.

Solidcore is an established leader for securing POS systems and is the chosen protection solution for nearly 100,000 POS systems worldwide. Unlike application whitelisting, host intrusion prevention systems (HIPS) and anti-virus, Solidcore provides runtime control capabilities that deliver comprehensive security with low overhead. Runtime control ensures only pre-authorized software and code can run on POS systems while securely allowing software updates from trusted sources, such as those generated by retail coupon engines. Solidcore's runtime control also prevents disk tampering, and provides advanced memory protection to authorized software to defend against buffer overflow vulnerability attacks and zero-day exploits.

"Financially motivated, targeted attacks are definitely focusing on POS systems," said John Pescatore, vice president and distinguished analyst for Gartner. "As with all business-critical systems, merchants must ensure they start with secure POS software and configurations, and then implement and enforce strong change control and vulnerability management processes to make sure that only authorized updates are allowed."

A retailer can use Solidcore's POS Check and Control to quickly validate field-deployed POS images against a gold image standard. Once POS systems are established as "clean" systems, Solidcore's runtime control works to prevent any malicious code or other unauthorized programs from executing. This unique security solution will allow an in-store technician to login as an administrator and perform routine maintenance while simultaneously preventing that technician from adding to or tampering with the set of software that is authorized to execute on the POS device. This level of protection extends across all forms of access, from network to USB key. Once secure, POS Check and Control reports on POS system changes in real-time for continuous PCI DSS compliance verification. This includes providing continuous information about change events such as "who" is making changes, "where" changes were made, "when" the change was made, "how" the change was implemented, and "what" content changed.

"With both margin pressure and the number of publicized and unpublicized data breaches on the rise, retailers cannot afford to cobble together combinations of audit, anti-virus and list-based security tools on their critical POS systems," said Anne Bonaparte, president and CEO of Solidcore. "POS Check and Control goes beyond the security flavor-of-the-week by giving retailers the power to ensure their POS systems remain secure and only change when the merchant wants them to."

Availability

The Solidcore POS Check and Control solution is available today from Solidcore. Solidcore supports most popular POS platforms, including those running Microsoft Windows Embedded Point of Service (WEPOS) and XP Embedded operating systems. For more information, please call 1-408-387-8400 or visit www.solidcore.com/retail.

About Solidcore

Solidcore is the leading provider of software to detect and prevent unwanted change. Organizations worldwide trust Solidcore's change control software to improve IT compliance, security and availability. Solidcore S3 Control easily automates PCI and SOX controls for compliance reporting, locks down critical systems to ensure only trusted applications run, and prevents change-related outages for improved service availability and accelerated ITIL adoption. Solidcore is headquartered in Cupertino, California. For more information, please visit www.solidcore.com.

Solidcore is a registered trademark of Solidcore Systems, Inc. in the United States and other countries. Solidcore POS Check and Control is a trademark of Solidcore Systems, Inc. All other product names, trademarks, and service marks mentioned herein are the property of their respective owners.

Release Summary:

Solidcore releases POS Check and Control for easily securing and controlling distributed retail point-of-service systems and kiosks, and for solving the rigors of PCI compliance.

KEYWORDS: change control, compliance, pci compliance, pci dss, point of sale, point of service, pos, retail

Copyright 2008 Business Wire All Rights Reserved.