ARM CBD attack vectors?

Question

System administration

Tell me, what attacks are there specifically on the AWP of the KBR, the settlement segment?
There is a billing segment:
Switch;
PC UTA with "SPO UTA";
PC with "ARM KBR".

Answer 1

So the Central Bank has already painted all the vectors. Are you getting any letters from Finsert?
I suspect that the attack goes through the substitution of the package file unloaded from the ABS to the CBD workstation or at the first stage or somewhere in the intermediate stage, since the CBD workstation provides such an opportunity. For protection, it is necessary to introduce an operator / controller scheme so that packages unloaded from the operator are signed with an EDS, and the controller manually checks for compliance. Or, if there is ABS support, then the ABS can do the check, and the controller can be done automatically.