Shulou(Shulou.com)11/24 Report--

Beijing, August 31-the "Advanced Network Security capability Assessment Series-extended threat Detection response (XDR) Technology Salon" organized by the Cyber Security Excellence demonstration Center (hereinafter referred to as "demonstration Center of Excellence") and hosted by Beijing Future Zhi'an Technology Co., Ltd. (hereinafter referred to as "Future Zhi'an") was successfully held in Beijing. With the theme of "gathering intelligence and ingenuity", this salon means that the domestic extended threat Detection response (XDR) technology product capability evaluation standards gather the wisdom of the network security industry, gather the efforts of a large number of industry experts to form, guide the improvement of the intelligent and automated security capability of XDR products, and use security to empower customers' business development value. This meeting adopts online and offline synchronous mode, dozens of security experts, industry users, research institutions and industry media in the field of threat detection and response attended the scene, and attracted more than 10,000 people.

Photo: Huang Yuanyuan, Deputy Director of Network Security Excellence Verification demonstration Center

Huang Yuanyuan, Deputy Director of the Cyber Security Excellence demonstration Center, opened the salon: "the increase in the type and number of cyber threats has driven the need for faster and more effective threat detection and response products and solutions. Strengthening the construction of the overall planning mechanism, means and platform of network security information is an effective way to improve the emergency command ability of network security events. Under this trend, extended threat Detection response (XDR) technology is attracting the interest and attention of industry organizations around the world, becoming a rapidly growing and potential market. " She said that through the 15th phase of the advanced program, the extended threat Detection response (XDR), the Center of Excellence hopes to provide network security builders with professional, reliable and authoritative third-party references around threat detection and response technologies such as terminals, traffic, and operations, and give full play to the role of innovation carriers and demonstration platforms to promote the high-quality development of the network security industry.

Figure: advanced Network Security capability Verification and Evaluation Program-- launch ceremony of XDR Product capability Evaluation

Huang Yuanyuan, deputy director of Cyber Security Excellence demonstration Center, Tang Jiajia, founder and CEO of Future Zhian, and Dong Yue, head of Business Department of Cyber Security Excellence demonstration Center, jointly launched XDR product capability evaluation of Advanced Cyber Security capability Verification and Evaluation Program at the meeting. This Center of Excellence and the official launch of the capability evaluation of the first batch of XDR technology products in Zhi'an in the future will guide the improvement of the intelligent and automated security capability of XDR products in all aspects.

Photo: Dong Yue, head of the Business Department of the Center of Excellence

With the theme of "Progress of Advanced Network Security capability Verification and Evaluation Program and interpretation of XDR Product Evaluation method Standards", Dong Yue, head of Business Department of Network Security Excellence Verification and demonstration Center, shared the work situation and module composition of advanced network security capability verification and evaluation, XDR evaluation standard and test interpretation, and follow-up work of advanced network security capability verification and evaluation plan. He mentioned that the advanced network security capability verification and assessment program will be extended from the small core capability assessment to the network security attribute, and to the large core capability verification assessment oriented to the digital security attribute characteristics. The evaluation standard of extended threat Detection response (XDR) is established, which follows the standard framework of the whole network security product capability evaluation system, which includes seven parts of product maturity and product general capability.

Photo: future Zhian Co-founder & CTO Chen Yuduan

Chen Yuduan, co-founder and CTO of Zhian, delivered a keynote speech on "looking at XDR's yes and no through chaos" at the scene, answering what is XDR's right and wrong from the perspective of both offensive and defensive sides. Chen Yuduan proposed that XDR should take threats as the core, focus on threat detection and detection, and build threat detection and defense systems at different stages around threats. XDR extended threat defense system mainly includes six construction stages: cyberspace defense map, cyberspace risk intelligence map, cyberspace attack monitoring center, cyberspace threat review center, cyberspace emergency dispatch center, cyberspace near-ground defense. "XDR must have a global mindset, threat perspective and bottom line defense thinking to create value for customers," Chen said. "We always firmly believe that 'security products are not social products, we do not have that much time to explore on the platform, tell me what are high-value alerts that need to be addressed'."

Photo: the launching ceremony of the joint development project of Future Zhi'an & Tencent Security XuanWu lab "threat Detection and response" technology

This salon also represents the official launch of the joint development project of XDR "threat Detection and response" technology between Zhian and Tencent Security XuanWu lab in the future. The launching ceremony was jointly completed by Tang Jiajia, founder and CEO of Future Zhi'an, Yu Xun, head of Tencent Security XuanWu lab, and Chen Yuduan, Co-founder and CTO of Future Zhi'an. This cooperation is a strong combination of two major technical teams of Zhian and Tencent Security XuanWu lab in the future, and will achieve a breakthrough in threat detection capabilities, especially complex network threat detection and protection capabilities such as blackmail, fishing and horizontal movement.

Photo: Tian Cuicui, Senior Product Manager of China Telecom Tianyi Security Technology Co., Ltd.

Tian Cuicui, senior product manager of China Telecom Tianyi Security Technology Co., Ltd., shared the theme on the construction of "unified security operation platform" for operators based on XDR architecture. From the perspective of customers and product operations, she focuses on how to effectively combine Tianyi Security's product capabilities and resources to provide customers with high-value security operation services. She said that XDR is a natural choice in the current environment, and it is a new challenge to achieve integrated security operation services in an ecologically open and heterogeneous environment. Building a unified security operations center based on XDR architecture, fully integrating existing decentralized elements such as security products / security capabilities, SIEM / SOC, large network threat intelligence, etc., can make chaotic security tools orderly, build and continuously improve the "security scenario" script to respond to security events in a semi-automatic / fully automated way, and provide hosted unified security operations services combined with cloud expert experience. To meet customer security needs.

Photo: round table dialogue session, guests: future Zhian Tang Jiajia (second from left), Tencent Security XuanWu lab (third from left), Dong Yue, Excellence demonstration Center (first from left), Zhao Mingming (second from right), China Telecom Tianyi Security (first from right).

At the end of the salon, there was a round-table dialogue session, which was moderated by Dong Yue, head of the business department of the Excellence demonstration Center, Tang Jiajia, founder and CEO of Future Zhian, Yu Jie (TK), head of XuanWu lab of Tencent, Zhao Mingming, senior security expert of SinoNet Information Industry Group, and Tian Cuicui, Senior Product Manager of China Telecom Tianyi Security Technology Co., Ltd., sat on their knees with ⎾ from exploration to definition. Based on XDR for threat defense "original innovation" ⏌ as the theme, around the security essence of "attack and defense" Aiming at the great changes of network security threats in the past two years, the development status of extended threat Detection response (XDR) products, the technical response strategies to deal with the changes of security threats, the "original innovation" requirements of current users for threat defense, how to combine XDR technology with specific application scenarios, and the future development of XDR from the perspective of value-driven, several realistic topics are discussed together.

The powerful network security industry is an important support for ensuring national network security. The formal launch of the Advanced Network Security capability Verification and Evaluation Program-XDR Product capability Evaluation means that the XDR standard has entered the practical stage of related product maturity and quality testing. Under the guidance of the Center of Excellence, Zhi'an in the future, as the lead unit of this standard, is also the only XDR product landing manufacturer in China that focuses on XDR technology research and development. In the future, it will continue to rely on XDR's "safe left, middle and right" innovation model to strengthen product specialization, refinement, characteristics and innovation ability, promote the benign ecology of industrial development, and protect the high-quality development of the national network security industry.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.