Download PDF
National Bankcard Services Enhances Security with SecureSphere SE for PCI Compliance
Technology Category
- Application Infrastructure & Middleware - Event-Driven Application
- Cybersecurity & Privacy - Application Security
Applicable Industries
- National Security & Defense
Applicable Functions
- Maintenance
- Quality Assurance
Use Cases
- Tamper Detection
- Track & Trace of Assets
The Challenge
National Bankcard Services (NBS) provides custom processing solutions for petroleum and convenience store markets, including an online service for retailers to offer various payment options. As part of its operations, NBS enables its customers to track sales from payment card usage through an online portal. To maintain its reputation, NBS must ensure that the sales and related private corporate information of their customers is protected from unauthorized access and data theft. The company was previously performing code reviews and manual code fixes for its web applications, a process that was both time-consuming and prone to human error. NBS needed to comply with PCI 6.6 to protect the online portal from all types of application threats. However, with a small IT staff, the solution needed to be easy to configure and maintain.
About The Customer
National Bankcard Services (NBS) is a company based in Minnesota, USA, that focuses on delivering cost-effective, custom processing solutions for petroleum and convenience store markets. The company provides an online service for these retailers so that they, in turn, can offer consumers an array of payment options including credit/debit/EBT cards, proprietary cards, fleet cards, checks, gift and prepaid cards and loyalty solutions. NBS provides a Web hosting service to each of its client companies via an online portal on the NBS Web site. Companies log into the portal in order to access their sales information, which is updated on an ongoing basis. NBS must ensure that the information is protected from unauthorized access or changes.
The Solution
After evaluating various solutions, NBS selected the Imperva SecureSphere SE Web Application Firewall solution. This solution directly meets the PCI 6.6 application-layer firewall requirement, provides robust protection for applications, features an easy-to-use management UI, and enables automated reports generation to ease the organization’s compliance efforts. SecureSphere SE, a market-leading Web application firewall packaged for medium enterprises, provides automated and accurate protection for their online customer portal. Through Dynamic Profiling, SecureSphere SE removes the need for constant manual tuning of application monitoring and security policies. With Correlated Attack Validation, SecureSphere SE delivers a highly accurate and completely automated defense system, keeping false positives to a minimum. Installed inline, SecureSphere SE directly detects and blocks application attacks in real time. It also detects and alerts NBS to discovered application vulnerabilities and points out related errors in the Web server response code, which developers may fix during the next application code change cycle.
Operational Impact
Quantitative Benefit
Related Case Studies.
Case Study
Data Capture for Afghanistan Forces
Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.
Case Study
Major Aerospace Company Automates Asset Management
The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.
Case Study
Securing a Large Data Center in the EMEA Region: An IoT Case Study
A leading data-center operator in the EMEA region, with multiple facilities spanning over 25,000 square meters, faced significant security challenges. The operator experienced interruptions in their internal IT network due to unsupervised work of third-party technicians. Despite having a high-end building control system that provided 24x7 monitoring and control to all the building’s infrastructure, the data center was vulnerable from a cyber perspective as it was connected to the IT network infrastructure. The operator launched an urgent OT cyber security project that included both IT-OT network segmentation and OT network asset mapping and anomaly detection. The main objectives were to harden the security of the server systems, secure the facility’s power supply and server cooling system, strengthen the segmentation between building and operational systems, create a visual OT network map, and set up a system for presenting supply-chain attacks that may threaten the data center through equipment vendors’ maintenance activities.
Case Study
Enhancing Security Precision with IoT: A Case Study of Guardsman Group
Guardsman Group, a leading security company in the Caribbean, faced a significant challenge in maintaining the security of its digital infrastructure. The company provides security equipment, personnel, and systems for various businesses across the region. However, one of its offices experienced a security incident that affected all communications at that location. The existing security tools were not sufficient to provide the necessary protection, and it took hours to identify the source of the issue. This incident highlighted the need for a dynamic solution that could proactively identify threats. The company's primary concern was any disruption to its business, as it manages a significant portion of Jamaica's money and cannot afford for its operations to go down.
Case Study
LoRaWAN - Helping citizens and organizations to reduce environmental impact
More and more, our world is becoming aware about the environmental print that comes with population growth, limitation of resources, climate change and the need for sustainability. The biggest challange here was to raise awareness among citizens and organizations about their environmental impact, and to help themto reduce it in a sustainable way with the help of Real time data.
Case Study
Enhancing City Security through IoT: A Case Study of Atlanta
The city of Atlanta, with a resident population of over 420,000 and a metropolitan area of more than five million people, faced the challenge of ensuring the safety and security of its citizens and visitors. As a leading tourist destination and a multicultural city attracting global investment, Atlanta had to deal with the complexities of managing safety and security incidents. Over the years, the city had invested in various surveillance systems, providing visual intelligence to law enforcement and security professionals. However, these systems operated independently and were spread across a wide geography. The city aimed to increase collaboration among government agencies and create a shared Video Integration Center (VIC). The challenge was the disparate nature of the video systems, which were based on proprietary technologies and were both analog and IP based. The city also wanted to leverage the numerous private cameras located across the city, further complicating the integration of all these systems into one common platform.
