Intelligent CISO Issue 15 | Page 49

K Kaspersky has launched new service packages designed for businesses working in the Blockchain industry and crypto economy. Token offering (ICO/ STO) projects and cryptocurrency exchanges are now offered tailored services such as smart contract code review, application and website security assessment, security awareness training, protection against phishing and incident response. In addition to these services, Kaspersky also provides crypto exchanges with fraud and money laundering prevention and targeted attack detection. Even though Blockchain was initially seen as a secure technology, there are now various threats and cybersecurity risks around the crypto economy. In the last two years, Kaspersky experts have become aware of phishing copies of a popular ICO website, targeted attacks on crypto exchange companies, adware intended to steal cryptocurrency and other attack vectors. To help Blockchain and crypto businesses overcome these challenges, Kaspersky now has two service offerings which consider the specifics of how such business models work and the lifecycle of token offerings and crypto exchanges. For token offering projects, Kaspersky services include the following: • Smart contract code review identifies flaws and undeclared features, as well as finds discrepancies between stated in the supporting documentations and smart-contract business logic • Application security assessment helps a startup team analyse the state of security of applications (be it a decentralised or a traditional one) developed by a startup To provide a high level of protection for crypto exchanges, Kaspersky offers a tailored service pack, which includes: Riaan Badenhorst, General Manager at Kaspersky Africa www.intelligentciso.com | Issue 15 • Application security assessment to help owners of crypto exchanges FEATURE detect critical bugs and address them before they cause damage • Penetration testing to help a crypto exchange identify weak spots in their systems and to ensure that hackers won’t penetrate them easily • User account takeover prevention to detect attempts from criminals to get access to user wallets Kaspersky’s Blockchain security services also include phishing protection to provide alerts when phoney copies of crypto exchanges and ICOs are generated, incident response service and cybersecurity awareness training to improve the overall level of cybersecurity hygiene so that a company will not fall victim to social engineering attacks. For crypto exchanges that have basic cybersecurity measures in place, Kaspersky provides additional enhancements. These include helping to spot potentially fraudulent Blockchain transactions to prevent money laundering and automatically identify and respond to targeted attacks. Even though Blockchain was initially seen as a secure technology, there are now various threats and cybersecurity risks around the crypto economy. For those crypto exchanges that have built an internal security operation centre, Kaspersky offers threat data feeds, along with information security training and awareness programmes for security operation teams so they can enhance their forensic and detection capabilities. 49