A kind of security protection method and system of ATM program updating

Abstract

The present invention proposes a safety protection method and system for ATM program update, dynamically senses whether there is an update program running in the ATM terminal, if so, blocks the update program's operation, and encrypts and backs up all information in the ATM terminal; after the encrypted backup is completed, Allow the update program to run; create a decoy folder, and if it senses that the update program has modified the decoy file, it will be determined that the update program is malicious and block the update program from running; otherwise, after the update program finishes running, update the Automatically test the updated program, and judge whether the updated program is malicious according to the test results; if the updated program is malicious, delete all the information created by the updated program, and restore the encrypted backup data; For updater security. The invention can effectively judge whether there is a potential threat in the update program.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an ATM program update security protection method and system. Background technique [0002] At present, the mainstream anti-virus software uses the MD5 feature of the file to scan and kill. This will inevitably cause a phenomenon that the anti-virus software always lags behind the latest virus. For individual users, this kind of killing is acceptable. , because the virus database will be updated every day, and the user will be prompted which programs have some suspicious behaviors for the user to choose. But it is not feasible for ATM killing method. First of all, ATMs exist in a closed intranet, and the virus database will not be updated in real time every day. At the same time, ATMs are unattended models, and the main business procedures of ATMs cannot be interrupted. Therefore, in the past, the MD5 method of file detection and killing can only treat the symptoms,...

AI Technical Summary

Problems solved by technology

But this traditional method is only pre-judgment, and its judgment range is limited. When the pre-judgment fails, the loss cannot be saved, which is unacceptable for equipment with high security requirements like ATM.

Images