Bibliographic citations
Casas, F., Hurtado, W. (2023). Plataforma Centralizada para Creación, Gestión y Distribución de Políticas de seguridad en Redes de Cajeros Automáticos en el Sector Financiero. [Trabajo de Suficiencia Profesional, Universidad Peruana de Ciencias Aplicadas (UPC)]. http://hdl.handle.net/10757/671476
Casas, F., Hurtado, W. Plataforma Centralizada para Creación, Gestión y Distribución de Políticas de seguridad en Redes de Cajeros Automáticos en el Sector Financiero. [Trabajo de Suficiencia Profesional]. PE: Universidad Peruana de Ciencias Aplicadas (UPC); 2023. http://hdl.handle.net/10757/671476
@misc{renati/412627,
title = "Plataforma Centralizada para Creación, Gestión y Distribución de Políticas de seguridad en Redes de Cajeros Automáticos en el Sector Financiero.",
author = "Hurtado Ponce, Wilfredo Jose",
publisher = "Universidad Peruana de Ciencias Aplicadas (UPC)",
year = "2023"
}
Currently, many financial institutions continue to manage access to ATMs, both physically and remotely, through default credentials. This leads to providing access credentials to field technicians who carry out maintenance or control visits to the equipment, this compromises the security of the information and control over the actions allowed in administrator sessions. For this reason, this project presents the implementation of a web system whose purpose is to create and distribute security policies in ATM networks. This system makes it possible to centrally manage the hardening measures necessary to ensure the optimal functioning of this equipment. In addition, the system has been designed with a modular approach, establishing management policies for three main groups: User Access Control, Intrusion Control and Disk Encryption. These policies are adapted to the specific environment of ATMs, which function as self-service systems and present characteristics and behaviors that are different from conventional computers. As a result, financial entities can have a customized system for ATM environments, prioritizing the exclusive authorization of the processes necessary for the regular operation of these devices in financial transactions and processes. In this way, security management is achieved in a rigorous and centralized manner.
This item is licensed under a Creative Commons License