Shulou(Shulou.com)06/01 Report--

Preface: with the advance of digital transformation, the enterprise IT system is gradually becoming the protagonist, truly carrying and even becoming the enterprise business itself, while terminals, networks and data have become the important cornerstone of the business system. Whether the interaction process is stable, whether the data is secure and reliable, to some extent determines whether the enterprise business system can run safely, stably and reliably.

Since its establishment, Xinhua 3 has developed the terminal admission control product EAD ³. When the terminal accesses the network, it strictly controls the network usage behavior of end users and protects the network boundary according to the interaction of users, admission control components, network devices (switches, routers, firewalls, wireless) and third-party software (antivirus software, patch servers). Conduct a compliance check on the terminals and the users of the terminals connected to the network.

[IT168 report] recently, the new generation of Xinhua terminal access control system EAD ³with the theme of "vertical and horizontal network, unassailable" has been officially released. Xinhua 3 provides users with multi-dimensional terminal management and protection capabilities from the four dimensions of network, data, desktop and behavior. At this press conference, Li Dong, Director of Software products Department of Xinhua 3 Business, summarized the innovation of EAD ³into: distributed ledger authentication cluster, AI+ terminal visualization and amoeba box, which can fully meet customers' needs for network access, desktop security, behavior audit and data protection.

Li Dong, Director of Software products Department of ▲ Xinhua three

Continue to lead the development process of 15 years

"when it comes to Xinhua 3, people first think of hardware products such as network equipment and WiFi products. Of course, Xinhua 3 Software is also very well-known," Yang Haijun, deputy general manager of Xinhua 3 Network products Department, said in his speech, which he elaborated from three dimensions.

Yang Haijun, Deputy General Manager of Network products Department of Xinhua San of ▲

First of all, Xinhua three began to develop Comware (network operating system for network equipment) when it was founded in 2003, which is defined as one of the company's core competitiveness. up to now, Comware has developed into a huge system with 70 million lines of source code, supporting all devices running on the same operating system and ensuring the consistency of all devices.

Secondly, Xinhua San IMC Intelligent Management Center (Intelligent Management Center, hereinafter referred to as: iMC) is not a simple location network equipment management software, but can manage all resources in the network. According to the "China Network Management Software Market tracking report, 2018H1" released by IDC, iMC Intelligent Management Center ranked first in China's network management software market with a market share of 23.3% in the first half of 2018. At the same time, according to IDC statistics, Xinhua 3 has continuously occupied the first place in the market share of China's network management software from 2017 to the first half of 2018, reflecting its strong strength in the field of network management software.

Finally, on September 20, 2017, Xinhua 3 also obtained the CMMI level 5 certificate issued by the CMMI Institute of the United States, indicating that the maturity of Xinhua 3's R & D software has reached the world-class level, and it also means that it has reached the peak in terms of the ability to control the R & D process and achieve goals.

The new generation of terminal admission control system EAD ³released today is only one of the modules of IMC, IMC includes 20 modules and components, EAD ³is one of them, EAD ³can be deployed independently or can be deployed on IMC. From EAD ³research and development to now, has 15 years of technology accumulation and precipitation, service more than 30 million user terminals, to provide customers with perfect access control services. In 2017, when the "Eternal Blue" blackmail virus was rampant, enterprises under the protection of EAD survived the virus epidemic period smoothly.

In the face of traditional certification risk, "blockchain" cracked the Achilles heel.

The current network authentication methods, whether cold backup, hot backup or escape mode, seriously rely on the reliability of the host. Once the host failure occurs, the whole authentication system may fail, which will affect the daily business of the enterprise. For this reason, Xinhua 3 got inspiration from the block chain technology, and realized decentralized distributed authentication through the deployment of distributed ledger network access clusters, which greatly improved the reliability and real-time performance of the authentication system. at the same time, the cost of user system deployment is greatly reduced.

The new generation of EAD ³innovatively introduces distributed ledger technology, and the core features are decentralization, real-time synchronization and high availability, which makes the admission control system evolve to a new mode of operation. Because there is no centralized management node in the design of the distributed ledger authentication cluster, the failure of single or multiple nodes will not affect the normal operation of the system, and can ensure that the system authentication is online forever. Therefore, the authentication reliability of the whole system has evolved to a new height. In theory, Xinhua SanEAD ³under the protection of distributed account books? The reliability of the system can reach 99.9999%.

Xinhua Sanead ³can perfectly adapt to users' existing network architecture, whether in traditional physical network environment, or in new architectures such as public cloud, private cloud and hybrid cloud, greatly enriching the user usage scene and increasing the applicable scope of EAD ³.

Add AI technology Xinhua three EAD ³to realize intelligent troubleshooting

With the ever-changing IT environment, in addition to PC, there are many kinds of terminals, such as smart phones, ATM machines, cameras, printers and so on, which bring the complexity of management. At the same time, new equipment is increasing, old equipment is eliminated, the network environment is complex and changeable, use habits are different, massive demand, which brings a great increase in the workload of operation and maintenance.

The new generation of Xinhua Terminal admission Control system EAD ³introduces artificial intelligence technology, which perfectly realizes the visualization of terminal system data, user data and business data by fully tapping the value of its own terminal admission data, and gives full play to the potential and value of the admission system in threat capture, crowd capture and business capture with the help of AI,EAD ³.

Visualization technology is an important indicator for AI to enter the terminal access system. EAD ³analyzes terminal system logs, user Internet behavior logs and terminal business data through the AI engine, and provides an intuitive graphical interface for early warning and security management to immediately warn potential threats and prevent terminal security problems from breaking out on a large scale. AI not only increases the ability of intelligent learning and self-evolution for EAD ³, but also accelerates the pace of terminal active security management, which is in line with the development trend of terminal security.

Bi Shouwen, vice president of ▲ Xinhua Group

Bi Shouwen, vice president of Xinhua 3 Group, also pointed out in an interview that Xinhua 3 established the AI Technology Research Institute and used Xinhua 3's cloud and network technology to accumulate data and a large number of patch management data. These real firsthand big data materials have become the firm cornerstone of EAD ³AI application.

Li Dong, director of the Software products Department of Xinhua San Business, added that it classifies a large number of terminals, uses a new generation of terminal access system EAD ³to manage smart terminals such as PC and smartphones, and uses Xinhua three Eagle Vision system to manage non-intelligent terminals such as cameras, and then put the two together to form a complete IP terminal.

Multiple adaptation scenarios, amoeba box is fully compatible

Amoeba box provides multi-scene adaptation, omni-directional compatibility, so that access control has more changeable evolution.

Amoeba Magic Box has a variety of service role-playing capabilities, such as AAA server, authentication gateway server, soft token authentication server, Oauth authentication server, etc., rich access control capabilities can easily deal with various types of access authentication scenarios; it can meet the account authentication and management in a mass user environment, support unified authentication of social media accounts and Email accounts, and integrate perfectly with the Internet ecology. Through zero-based one-stop page development capability, it allows users to customize a variety of exclusive authentication pages to achieve full coverage of PC, mobile phones and PAD. In order to meet the needs of mobile operation and maintenance, amoeba magic box also launched a mobile operation and maintenance APP tool, so that operation and maintenance become ubiquitous.

For customers with high compliance requirements, amoeba box is embedded with a dynamic soft token system, which can provide customers with zero-cost two-factor authentication combined with username and password, helping customers to meet all kinds of regulatory requirements at low cost. at the same time, the amoeba box can also fully support the national secret algorithm to meet the security requirements of specific industries.

Whether it's an upgrade based on traditional network infrastructure or a next-generation computing platform deployed directly in public or private clouds, the EAD ³system with amoeba boxes can respond to users' needs, from the cloud to the office, from mobile phones to PC.

Focus on the new scene: terminal behavior audit & data protection

Conventional a set of standard terminal behavior audit system is composed of four parts, network access, desktop security, data protection, behavior audit, end-network combination of multi-dimensional protection system based on the terminal local, in order to put an end to all possible security accidents.

The traditional access system lacks terminal behavior audit & data protection, which is realized by another separate software, such as DLP, network audit software. Xinhua SanEAD ³decided to add the latter two pieces, really put them together, and can achieve sensitive behavior identification. We are divided into system behavior and Internet behavior to achieve equal emphasis on management audit and behavior content.

Li Dong stressed that in terms of in-depth data analysis, we can currently analyze 500 different types of data.

Write at the end

As the saying goes, the network has no size, security is no small matter, the new generation of terminal access system EAD ³can meet the use of scenarios of various sizes, in the future, Xinhua 3 will also continue to iterate its products to serve domestic and foreign customers with more efficient, proactive and innovative R & D capabilities and service levels, and achieve geometric improvement in experience.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.