




版權(quán)說(shuō)明:本文檔由用戶提供并上傳,收益歸屬內(nèi)容提供方,若內(nèi)容存在侵權(quán),請(qǐng)進(jìn)行舉報(bào)或認(rèn)領(lǐng)
文檔簡(jiǎn)介
XP Windows7
XP Windows7
XP
XP ATM
WindowsXP'sretirementcouldputATMsandmoreatrisk
XP
AfterApril8th,2014,Microsoft(MSFT)willendsupport,includingautomaticsecuritypatches,forits13-year-oldWindowsXPoperatingsystem.Thismaysoundlikeaninconvenienceprimarilyforgovernmentagenciesandaginguncles,butanothermajorsetofWindowsXPusersaretheautomatedtellermachinesandcreditcardsalessystemsthathandlebillionsofdollarsoftransactionsdaily.
201448
Microsoft
13
Windows
XP
WindowsXP
Whilemajorretailersandbanksarelikelytobewell-preparedfortheendofXP,financialsystemsbasedonthesoftwarearealsointhehandsofafar-reachinghodgepodgeofindependentATMoperatorsandsmallbusinesses.Despiteamplewarning,industryanalystsandinsidersagreethathighcostandinconveniencewillkeepplentyofthesesmallerplayersrunningoutdatedsoftwareformanymonthstocome--withseriousimplicationsforthesecurityoftheirsystems.
XP
JerryNevins,co-owneroftheKansasCitycocktailbarSnow&Co.,isclosetothedilemma.Snow&Co.boughtapointofsalesystemlessthanayearagofromthepaymentsservicerMicros--onlytobetoldwithinafewmonthsoftheneedforanupgradetoWindows7,atacostof$1,700forthesingle-storesystem.Luckily,Snow&Co.wasstillunderaserviceagreement,soitsupgradewasfree.ButasNevinsputsit,"Ifyou'reasmallbusiness,anunexpected$1,700mightbelike,eh,I'llgoaheadandtakemychances."Moreover,Nevinsdescribesa"hugeline"ofMicroscustomerswaitingforanupgrade.He'scrossinghisfingersthatSnow&Co.willbeupgradedbeforetheApril8deadline.
Snow&Co
Micros
Windows7
1700
1700
Coststoretailcreditcardprocessorswillvarywidely,saysJohnBerkeleyofMercuryPaymentSystems."IfyouhavetherighthardwareyoucanjustupgradetheOS,butforsomemerchantsupgradingfromXPtoWindows7canmeanallnewhardware,"likelycostingmuchmorethanthat$1,700.
MercuryPaymentsSystems
1700
ThechallengesofupgradingbecomeevenbiggerinthecaseofATMs.ATMmanufacturersareofferingsoftwareupgradesformachinesstillbasedonXP--thoughsomeofthosehavebeenavailableforlessthanamonth.Butthecosttoupgradecanbestaggering.
ATM
ATM
XP
ATM
AccordingtoJayWeber,vicepresidentinchargeofNorthAmericandebitandATMsystemsforFISGlobal,"AnATMmachinepurchasedinthelastfiveyears...wouldonlyneedasoftwareupgradeof$4,000to5,000permachine."ThatsoftwarecostissohighinpartbecausemuchspecializedsoftwarewrittenforWindowsXPcan'tbeeasilyportedtoanewoperatingsystem.ButATMs10yearsoldormorewouldneedtobecompletelyreplaced,andWebersaysthatnewhigh-endATMscancostatleast$50,000to$60,000perdevice.
FISGlobal
ATM
ATM
40005000
ATM
WindowsXP
10
ATM
ATM
ATMoperatorsandbusinessownersarelargelybeinglefttodecideontheirownwhethertoupgradeornot,saysWeber."Organizationsaretryingtolookattheinvestmentoftheupgradeandweightitagainsttheirperceivedrisk"--andmanyseemtobereadytotaketheirchances."[April9th]isgoingtocomeandgo,andtherearegoingtobesomemerchantswhohaven'tdoneityet,"saysBerkeley.Weberspeculatesthat"it'sgoingtobeatrickleapproach,aslowerramp-up,"withmanysystemsgoingwithoutanupgrade--andremainingofficiallyinsecure--throughtheendof2014.
ATM
2014
Thishesitancymaybeworsenedbecauseoperatorsaregettingmixedmessagesabouttheirrisk.ThePaymentsCardIndustrySecurityStandardsCouncilhasissuedpublicwarningsabouttheneedforretailerstoupgradetheirpointofsalesystems,buttheircurrentsetofstandards,whichareusedtodetermineeligibilitytooperateoncreditcardnetworks,donotrequireit.AndWeberhimselfseemssanguine:"Theriskishardtoquantify.There'salotoftechnologyinplaceinthemarketplacetohelpmitigatetherisk,"suchasthe"fairlyclosedtelecomenvironment"thatmostpaymentsystemsoperateon.
thePaymentsCardIndustrySecurity
StandardsCouncil
ButBogdanBotezatu,seniore-threatanalystfortheanti-malwaresoftwarecompanyBitdefender,couldn'tdisagreemore.Hetalksabouttheissuewiththebarelysuppressedterrorofafatherwatchinghisteenagesondrivesoloforthefirsttime."They'renotpanicky,"hesays,"andactuallythatmakesmepanicky."
XP
XP
Bitdefender
Botezatu,whohauntsundergroundhackingforumstokeepaneyeonloomingsecuritythreats,claimsthathackersaregearinguptoraidsuddenlyinsecureXPmachinestheminuteMicrosoftsupportends."Whenanoperatingsystemisannouncedasreachingitsendoflife,[hackers]arefranticallylookingforexploits,becausethentheycanuseitindefinitely,"hesays."It'stheholygrailofmalware."
XP
WindowsXP
Totakefullestadvantageofthesituation,black-marketvendorssellingnewXPexploitshavebeenstockpilingthem,waitingtoreleasethemuntilafterMicrosoftisnolongermonitoringandrepairingsecurityflaws.Thoughthird-partysecurityfirmswillcontinuetoupdateanti-malwareprogramsforXP,usersnotrunningorupdatingsuchsoftwarecouldbepermanentlyvulnerabletoanever-growingsetofexploits.MercuryPaymentSystems'JohnBerkeleyconfirmsthat"Ifahackerdiscovers[avulnerability]amonthortwoaftertheendof[XPsupport],theyhavemoretimetoexploitthat."
XP
XP
XP
Theseexploitscouldrangefromstealingcreditcardinformationfromsmallvendorstoevenmoredramaticformsoftheft,manyofthemeasilycircumventingexternalsecuritymeasuressuchasthesemi-closedpaymentsnetwork.BotezatusaystherehavebeenreportsofanATMexploitthroughamobilephoneconnectedthroughanATM'scardreader.HealsocitesalegendarystuntbythesecurityexpertBarnabyJackattheBlackHatsecurityconferencein2010,wherehedemonstrateda"Jackpotting"hackthateasilyemptiedanXP-basedATMmachine.AccordingtoBotezatu,Jack,whodiedin2013,neverrevealedthenatureofthisexploit,meaningthatitcouldremainanunpatchedvulnerabilityinXP-basedmachines.
ATM
ATM
2010
XPATM
2013
XPATM
Mosttroublingofall,BotezatupredictsthatunsecuredXPmachinesofallkindswillbecompromisedbyhackerstoformnewbotnets.Thiskindofsystem,inwhichhackedsystems'processorsareputtonewtasksunbeknownsttotheirowners,canbeusedforeverythingfrommassiveDenialofServiceattackstominingcryptocurrency,and
溫馨提示
- 1. 本站所有資源如無(wú)特殊說(shuō)明,都需要本地電腦安裝OFFICE2007和PDF閱讀器。圖紙軟件為CAD,CAXA,PROE,UG,SolidWorks等.壓縮文件請(qǐng)下載最新的WinRAR軟件解壓。
- 2. 本站的文檔不包含任何第三方提供的附件圖紙等,如果需要附件,請(qǐng)聯(lián)系上傳者。文件的所有權(quán)益歸上傳用戶所有。
- 3. 本站RAR壓縮包中若帶圖紙,網(wǎng)頁(yè)內(nèi)容里面會(huì)有圖紙預(yù)覽,若沒(méi)有圖紙預(yù)覽就沒(méi)有圖紙。
- 4. 未經(jīng)權(quán)益所有人同意不得將文件中的內(nèi)容挪作商業(yè)或盈利用途。
- 5. 人人文庫(kù)網(wǎng)僅提供信息存儲(chǔ)空間,僅對(duì)用戶上傳內(nèi)容的表現(xiàn)方式做保護(hù)處理,對(duì)用戶上傳分享的文檔內(nèi)容本身不做任何修改或編輯,并不能對(duì)任何下載內(nèi)容負(fù)責(zé)。
- 6. 下載文件中如有侵權(quán)或不適當(dāng)內(nèi)容,請(qǐng)與我們聯(lián)系,我們立即糾正。
- 7. 本站不保證下載資源的準(zhǔn)確性、安全性和完整性, 同時(shí)也不承擔(dān)用戶因使用這些下載資源對(duì)自己和他人造成任何形式的傷害或損失。
最新文檔
- ESD靜電防護(hù)知識(shí)課件
- 國(guó)學(xué)智慧與傳統(tǒng)文化匯報(bào)模板
- 38900培訓(xùn)課件教學(xué)課件
- 吉林省長(zhǎng)春市2025屆高三下學(xué)期2月質(zhì)量監(jiān)測(cè)(二)(二模)地理 含解析
- 人教版數(shù)學(xué)小學(xué)六年級(jí)下冊(cè)第一課廣角鴿巢問(wèn)題習(xí)題
- 人教版數(shù)學(xué)六年級(jí)下冊(cè)第一單元《負(fù)數(shù)》同步練習(xí)含答案
- 人教版數(shù)學(xué)【基礎(chǔ)+提升】小學(xué)六下1.1認(rèn)識(shí)負(fù)數(shù)同步練習(xí)含答案
- 2025年廣西貴港市港南區(qū)重點(diǎn)名校初三第二學(xué)期期末質(zhì)量抽測(cè)化學(xué)試題試卷含解析
- 河南省鄭州市鞏義市2024-2025學(xué)年小升初模擬數(shù)學(xué)測(cè)試卷含解析
- 2025年山東省寧津縣市級(jí)名校初三年級(jí)四月調(diào)研考試化學(xué)試題含解析
- 國(guó)開(kāi)(安徽)2024年秋《質(zhì)量管理》形成新考核1-4答案
- 大象版一年級(jí)下冊(cè)科學(xué)全冊(cè)教案
- GB/T 6003.2-2024試驗(yàn)篩技術(shù)要求和檢驗(yàn)第2部分:金屬穿孔板試驗(yàn)篩
- 人工智能大模型
- HIV感染者精神障礙管理專家共識(shí)(2024版)解讀
- 舌尖上的植物學(xué)學(xué)習(xí)通超星期末考試答案章節(jié)答案2024年
- 藝術(shù)品保存狀態(tài)對(duì)價(jià)格的考量
- 四年級(jí)信息技術(shù)下冊(cè) 第2課 美化調(diào)查圖表教案 粵教版
- 招投標(biāo)法對(duì)簽訂合同的規(guī)定(2024版)
- 《客艙安全與應(yīng)急處置》-課件:15秒開(kāi)艙門
- 高功率固體激光器熱管理新技術(shù)研究
評(píng)論
0/150
提交評(píng)論