Asset security protection system and method for fixed environment

Abstract

Disclosed are an asset security protection system and an asset security protection method for a fixed environment. The asset security protection system includes a dispatch server, an audit server anda plurality of fixed hosts. At least one update file is initially sent from the dispatch server to the audit server. The audit server generates at least one comparison file according to the update file, and transmits the comparison file back to the dispatch server. The dispatch server compares whether the update file and the comparison file are the same. If the comparison result is that the updatefile and the comparison file are the same, the update file is outputted to each fixed host.

Description

technical field [0001] The invention relates to an information security protection system for a fixed environment and an information security protection method thereof, in particular to an information security protection system and an information security protection method for a fixed environment that can avoid implanting malicious programs from inside. Background technique [0002] Nowadays, for the sake of convenience, people will withdraw or transfer money through fixed ATMs, and such ATMs are also currently targeted by cyber hackers. [0003] Current ATMs are equipped with firewalls or anti-virus software in the system to resist the direct attacks of hackers. However, most of these firewalls or anti-virus software are installed Direct intrusion, but hackers' attack methods are also changing with each passing day. First, hackers will invade the intranet through phishing emails, or hack into the recording system to steal administrator account secrets, or directly steal net...

AI Technical Summary

Problems solved by technology

[0003] Current ATMs are equipped with firewalls or anti-virus software in the system to resist the direct attacks of hackers. However, most of these firewalls or anti-virus software are installed Direct intrusion, but hackers' attack methods are also changing with each passing day. First, hackers will invade the intranet through phishing emails, or hack into the recording system to steal administrator account secrets, or directly steal network packets and analyze account secrets. Finally, use the stolen administrator’s account password to remotely invade the management server, and the intruded management server directly sends a malicious program disguised as an update program to the cash machine, and the cash machine implanted with the malicious program can be hacked cracked by hackers, and allowed to be controlled by hackers for illegal theft

Images