Shulou(Shulou.com)06/01 Report--

Recently, the discerning eye malicious code integrated monitoring system of Guodu Industrial Company has been officially released. This product is a new generation of multi-dimensional monitoring system for the national capital Xingye to deal with network security threats under the new situation, and can realize the full life cycle monitoring of security threats. In the malicious code * * phase, latent phase and * * phase to achieve comprehensive monitoring coverage, to achieve a variety of advanced and complex network threats and *. The concept of this technology is the first of its kind in China, and is in a leading position.

With the rapid development of information technology in China, the network security situation is becoming more and more complex. in the face of various advanced and complex security threats and *, the traditional security products (firewall, IDS/IPS, antivirus gateway) which rely on known features, rules and behavior matching patterns for detection and monitoring have been unable to cope with. Guodu Societe Generale creatively put forward the security monitoring technology concept of "continuous monitoring, continuous monitoring, multi-dimensional correlation and comprehensive analysis" to monitor and analyze unknown malicious code, special * and APT complex threats continuously and in real time throughout the network.

The discerning malicious code comprehensive monitoring system has 4 functional modules, 7 security intelligence libraries and 9 monitoring engines. to realize multi-layer, multiple and multi-dimensional security threat monitoring, the national capital Xingye and the "National Information Technology Security Research Center" jointly set up a security threat monitoring and analysis research laboratory, which ensures the timeliness, authority and advanced monitoring technology of the security information database.

Visual security analysis is an important part of the system, the product provides a variety of event alarm, anomaly detection alarm and monitoring data visual analysis platform, preset a wealth of analysis and modeling tools, but also provides custom analysis templates. Through visual analysis, security analysts can carry out in-depth analysis, correlation analysis and comprehensive analysis of event alarm, abnormal traffic, abnormal protocol and abnormal behavior to study and judge all kinds of security threats.

The company has a professional security analysis service team composed of network technology research, malicious code detection and monitoring technology research, system vulnerability analysis research, APT*** research and security big data analysts. Based on our security big data analysis platform, we gather the monitoring data of discerning eye security monitoring audit products (network monitoring audit, database monitoring audit, log audit) for in-depth, correlation and comprehensive analysis. to achieve a comprehensive network-wide security threat monitoring analysis and security situation. To provide users with on-site investigation, positioning and qualitative analysis of security incidents, emergency disposal and professional security services for security protection system response strategies.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.