﻿KASPERSKY SECURITY NETWORK (KSN) STATEMENT

Kaspersky Security Network Statement (hereinafter "KSN Statement") relates to the computer program Kaspersky Embedded Systems Security 3.4 for Windows (hereinafter "Software").
KSN Statement along with the End User License Agreement for Software, in particular in the Section "Conditions regarding Data Processing" specifies the conditions, responsibilities and procedures relating to transmission and processing of the data, indicated in the KSN Statement. Carefully read the terms of the KSN Statement, as well as all documents referred to in the KSN Statement, before accepting it.

When the End User activates the using of the KSN, the End User is fully responsible for ensuring that the processing of personal data of Data Subjects is lawful, particularly, within the meaning of Article 6 (1) (a) to (1) (f) of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") if Data Subject is in the European Union, or applicable laws on confidential information, personal data, data protection, or similar thereto.

Data Protection and Processing
Data received by the Rightholder from the End User during use of the KSN are handled in accordance with the Rightholder's Privacy Policy published at: https://www.kaspersky.com/products-and-services-privacy-policy.

Purpose of Using the KSN
To make it possible to increase the Software's speed of reaction to information and network security threats.
The declared purpose is achieved by:
- determining the reputation of scanned objects;
- identifying information security threats that are new and challenging to detect, and their sources;
- taking prompt measures to increase the protection of the data stored and processed by the End User with the Computer;
- reducing the likelihood of false positives;
- increasing the efficiency of Software components;
- investigating of infection of a user's computer;
- improving the performance of the Rightholder's products;
- receiving reference information about the number of objects with known reputation.

Processed Data
While the KSN is enabled, the Rightholder automatically receives and processes the following data:
performed commands IDs; ID of the operation being performed on the third-party software; third-party software update ID; heuristically derived name of the email marketer - email message sender; unique ID of the activity log for the object being processed; unique event ID; event date and time; Software categorization base ID; Software database record ID; type of the triggered Software anti-virus databases record; Software database record version; ID of the triggered record in the Software's anti-virus databases; timestamp of the triggered record in the Software's anti-virus databases; type of the triggered record in the Software's anti-virus databases; release date and time of the Software's databases; DNS name for the owner of the logon session; binary mask of options of the DNS query; type of DNS query; device ID; OS version, OS build number, OS update number, OS edition, extended information about the OS edition; OS ID; OS Service Pack version; name of the Windows registry key; type of the Windows registry value; Windows services hosted in the process being processed; ID of the account under which the controlled process was started; Device Guard (windows) enablement status; vulnerability mitigation technique type that had triggered on exploit; IP address; computer FQDN name; network interfaces list of the computer; http request method; location where code was injected in process; unique User ID in the Rightholder's systems; license identifier; version of the operating system installed on the user's computer; zone index where the endpoint IP address belongs; name of the Kerberos Realm that client name belongs to; name of the domain controller used to issue Kerberos ticket; Kerberos session key characteristics; name of the domain used to authenticate the owner of the logon session; name of the server used to authenticate the owner of the logon session; name of the Kerberos Realm that server name belongs to; unique ID of the logon session; account name of the user that owns the logon session; user name for the owner of the logon session; logon session type; Kerberos ticket flags mask; Kerberos ticket cache flags mask; account that requested the Kerberos ticket; cryptographic suite that was used for issued Kerberos ticket; date and time when the Kerberos ticket expires; checksum (MD5) of the Kerberos ticket data; date and time when the Kerberos ticket was issued; computer name on the network (domain name); protocol used to exchange data with KSN; ID of the KSN service accessed by the Software; encryption characteristics of data package that is being sent to KSN; ID of data package that is being sent to KSN; external IP address; local IP address; MAC address of the network attack source; name of network protocol used in the detected network attack; direction of a network connection; type of user account under which the potentially malicious object was started; file attributes of an object being processed; data of the internal log, generated by the anti-virus Software module for an object being processed; date and time of the last modification of the object being processed; detect characteristics; format of the object being processed; result of status check in KSN of an object being processed; checksum (MD5) of the object being processed; name of the object being processed; names of the packers that packed the object being processed; flag indicating whether the object being processed is a PE file; Software name; checksum (SHA256) of the object being processed; information on who signed the file being processed; size of the object being processed; name of the detected malware or legitimate software that can be used to damage the user's device or data; object type code; Software vendor name; Software verdict on the object being processed; time of the first launch of the object being processed; integrity level for the object being processed; checksum (MD5) of the object being processed; detected file operations with the object being processed; result of action with the object being processed; file operation code; path to the object being processed; directory code; process system ID (PID); command line; value of the Windows registry element; access rights for the object being processed; source file path; vulnerability ID; vulnerability danger class; operating system bit version; OS edition; full path to parent process file used to launch the process; parent process system ID (PID); command line arguments for the process; Software ID derived from the license; data about the license for identifying a group of users of the company that purchased the license by the comment in the license properties; full version of the Software; Software update ID; installation date and time for the Software; Software activation date; Software license ID; ID of the information model used to provide the Software license; serial number of the Software license key; Software localization; notification type, that triggered the statistic sending; OS versions; Software version; identifier of the partner organization via which the Software license order was placed; Software installation ID (PCID); Software rebranding ID; Software component name; operating status of the Software component; ID of the licensed Software; type of the installed Software; flag indicating whether the Software is connected to Web-Portal; flag indicating whether participation in KSN is enabled; name of the created/modified OS service; web address from which the file that matches the process was downloaded; DNS server response; IP address of the DNS server; date and time when statistics stopped being received; error code; debug detection indicator; attribute of an object being processed, that allowed to recall the false positive decision on the object; ID of the task in which detection was performed; number of KSN connections taken from the cache; number of requests for which a response was found in the local request database; number of unsuccessful KSN connections; number of unsuccessful KSN transactions; temporal distribution of cancelled requests to KSN; temporal distribution of unsuccessful KSN connections; temporal distribution of unsuccessful KSN transactions; temporal distribution of successful KSN connections; temporal distribution of successful KSN transactions; temporal distribution of successful requests to KSN; temporal distribution of requests to KSN that timed out; number of new KSN connections; number of unsuccessful requests to KSN caused by routing errors; number of unsuccessful requests caused by KSN being disabled in the Software settings; number of unsuccessful requests to KSN caused by network problems; number of successful KSN connections; number of successful KSN transactions; total number of requests to KSN; delay of sending the statistics; ID of the operation being performed by the Software; date and time when statistics started being received; version of the statistics being sent; binary mask of the parameters for the object being processed; checksum of the user name; user account security identifier (SID); header of the http request being processed; port number; web address of the source of the web service request (referer); web address being processed; information about the client that uses a network protocol (user agent); start type of the Windows service; name of the created WMI event consumer; namespace name for the WMI event consumer; WMI event consumer; name of the filter used by the WMI event consumer; security zone identifier extracted from the NTFS stream.

Your Choice to Participate
Providing the above information to the KSN is voluntary. After installing the Software, the End User can at any time enable or disable the use of the KSN in the Software settings as described in the User Manual.

When the End User decides to disable the KSN, the Rightholder will not receive new data. The Rightholder may still process certain data already received under legitimate interest according to point (f) of Article 6 (1) of the EU General Data Protection Regulation (GDPR) for the purposes described in the Privacy Policy at https://www.kaspersky.com/products-and-services-privacy-policy. If the End User wishes to object to such data processing, the End User must inform the Rightholder in the manner specified in the Privacy Policy. For more information about legal bases for data processing and End User's rights and options, the End User may consult the Privacy Policy at https://www.kaspersky.com/products-and-services-privacy-policy.

© 2023 AO Kaspersky Lab.


