Software controls and secures POS systems and kiosks.

Bit9, Inc. Aug 18, 2008

Press Release Summary:

Based on application whitelisting, Bit9 Parity for POS(TM) enables IT and security professionals to identify and decide which applications and devices are approved to run in their environment, while blocking any unauthorized software, known and unknown malware, and use of storage devices. Program supports Windows Embedded Point of Service integration to lockdown Windows computers and POS systems, and cardholder data protection to prevent unauthorized access to data.

Original Press Release:

Bit9 Announces Application Whitelisting Solution for Point-of-Sale

Easiest, most effective way to control and secure POS systems and kiosks

BOSTON, Aug. 6 /- Bit9, the pioneer and leader in Enterprise Application Whitelisting, today announced a new security solution for companies with Point-of-Sale (POS) systems and kiosks: Bit9 Parity for POS(TM). Built on the company's industry-leading application whitelisting expertise, Bit9 Parity for POS is the easiest and most effective way for retailers and any company with a POS system or kiosk to control and secure information as well as help with Payment Card Industry (PCI) Data Security Standard (DSS) compliance.

Locking down and securing today's POS payment devices, servers and self-serve kiosks has never been more challenging, as the 20-year-old antivirus industry that relies on pattern-matching and blacklisting is struggling to keep up with the exploding universe of malware. POS and kiosk systems pose a serious security challenge as they are often targeted by malicious hackers for their role in handling sensitive and valuable customer data. Yet most companies are unable to easily control what applications can and cannot run on these machines. Many POS systems are also unable to easily receive updates and patches, or control portable storage devices, leaving systems open for employees or malicious hackers to install unauthorized software or copy confidential information.

Bit9 Parity for POS addresses these challenges by making it easier and more cost-effective to control these machines. The Bit9 solution gives IT and security professionals the ability to identify and decide which applications and devices are approved and appropriate to run in their environment, while blocking any unauthorized software, known and unknown malware, and the use of storage devices.

By taking this positive approach to security with application control and application whitelisting, Bit9 provides the ability to identify and run only approved software and devices, drastically reducing the amount of IT support and maintenance needed on these systems. Companies no longer need to rely on in-store personnel to update signatures, patches and security configurations.

"Bit9 is committed to providing new and innovative security and control solutions to meet our customers' challenges. We recognized that Point of Sale systems, devices, servers and kiosks present a soft target for malicious hackers and that companies need a better way to help demonstrate compliance with PCI DSS rules," said Bit9 CMO and Chief Strategist, Tom Murphy. "Bit9 Parity for POS is our answer to ease the pain our retail customers are facing in managing, controlling and securing these systems."

Bit9 Parity for POS includes support for:

-- Windows Embedded Point of Service (WePOS) integration to lockdown Windows computers and POS systems to ensure only approved software runs;

-- PCI support & system protection , to quickly and easily help enable PCI DSS compliance;

-- Cardholder data protection (Lockdown & Device Control), to prevent unauthorized access to data, block the usage of unauthorized devices and applications, and ensure information is secured.

Supporting Information:

-- Ritz Camera received the Gartner IT Security Innovation Award in June of this year for the company's implementation of Bit9 application whitelisting to protect its kiosk systems and demonstrate PCI DSS compliance.

-- Marks & Spencer (M&S), one of the largest retailers in the United Kingdom, has licensed the Bit9 solution to proactively protect its customers and retail operations from unauthorized software and malware and to enforce Payment Card Industry (PCI) Data Security Standard (DSS) on 16,000 of its POS systems.

-- In a report published by Gartner on August 5, 2008, Gartner analysts Neil MacDonald and Michael A. Silver wrote, "Application control solutions address shortcomings in antivirus and other signature-based approaches and provide security and operational benefits." The report also states, "When antivirus agents and patching aren't possible, consider application control and system hardening as alternative security controls for point-of-sale terminals, supervisory control and data acquisition (SCADA) systems, and other devices that fall under regulatory requirements."*

-- Bit9 has formed a strategic partnership with Pinnacle Corporation to help Pinnacle retail customers meet PCI DSS requirements and adhere to Visa's Payment Application Best Practice (PABP) standard requirements.

About Bit9

Bit9 is the pioneer and leader in enterprise application whitelisting. The company's patented solutions ensure only trusted and authorized applications are allowed to run, eliminating the risk caused by malicious, illegal and unauthorized software. Unlike traditional, reactive controls that try to scan and prevent the never-ending list of unauthorized software, Bit9 leverages the Bit9 Global Software Registry(TM) -- the world's largest database of software intelligence -- to ensure only authorized applications can run, delivering the highest levels of desktop security, compliance, and manageability. Bit9 customers include companies in a wide variety of industries, such as retail, financial services, healthcare, e-commerce, telecommunications, as well as government agencies. Founded in 2002, Bit9 is privately held and based in Waltham, Massachusetts. For more information, visit www.bit9.com/ or call 617.393.7400.

*Application Control Market Update, by Gartner analysts Neil MacDonald and Michael A. Silver, August 4, 2008