Shulou(Shulou.com)06/01 Report--

Today, no matter large or small enterprises, all industries are vigorously promoting information construction and upgrading, and constantly improve the competitiveness of enterprises. Network is the foundation of information construction. in the process of promoting informatization, it is necessary to ensure the security and stability of enterprise network. With the development of information technology, the security of enterprise computer network system will be threatened more and more.

On May 12, 2017, a worm-like blackmail virus called "WannaCry" broke out around the world. WannaCry is also known as "Eternal Blue". Eternal Blue broke out around the world through the MS17-010loophole, infecting a large number of computers. After infecting the computer, the worm will plant a blackmail virus into the computer, causing a large number of computer files to be encrypted. After the victim's computer is locked, the virus prompts to pay a certain amount of bitcoin before it can be unlocked.

Many industries have been affected by the "Eternal Blue": many Chinese college students report that their computers are infected by viruses, and their documents are encrypted; public security networks such as entry-exit and police stations across the country are suspected to have been attacked by viruses; 20, 000 gas stations in PetroChina have been offline for 35 hours; the National Internet Emergency Center has detected that a large number of IP addresses have suffered loopholes * *; all lines in TSMC power plant have been shut down. More than a dozen hospitals in the UK have been affected by the virus, which has affected a large number of patients; a domestic car software is suspected to have been blackmailed and completely paralyzed.

From this, we can see that the network attack threatens our economy, life, social stability and even life safety all the time. Just imagine, if the aircraft dispatching system, the hospital operating room system, the State Grid, the computer rooms of some chemical enterprises and so on encounter blackmail virus, resulting in the system is locked, what will be the serious consequences?

For the information construction of enterprises, although the cloud desktop itself is not a pure security product, its product features can solve many security problems, including patch management, security reinforcement, internal attack and "disaster recovery". In recent years, enterprises have entered the cloud era driven by the digital transformation and the general trend of cloud enterprises. Cloud desktop technology has brought great improvement to terminal management and security, and the demand for terminal management in various industries is surging day by day. More and more terminal computers need more advanced technology for unified management and maintenance. It can be seen that after a large-scale attack in 2017, enterprises have made great achievements in attaching importance to terminal security.

The continuous upgrading of cloud desktop technology has effectively improved the terminal management and security level of enterprises, and the development of the cloud computing era has led to an increasing demand for terminal management in various industries. According to CNCERT sampling monitoring, in 2018, the number of hosts infected with malicious computer programs in China was about 6.55 million, down 47.8% from the same period last year. Microsoft Modern Cloud Desktop Microsoft 365 provides a complete enterprise cloud desktop security solution, and Microsoft 365 includes Windows 10, Office 365 and EMS mobile device management solutions to help enterprises achieve the security benefits of modern cloud desktops in a more cost-effective way.

From a security perspective, the Windows Defender Advanced threat Protection (ATP) built into Microsoft 365 is a unified platform for protection, post-leak detection, automated investigation, and response.

ATP has the following characteristics:

L agentless, relying on cloud technology

There is no additional deployment or infrastructure. There are no delay or update compatibility issues. Always keep up-to-date.

L unparalleled insight

Built-in Windows 10 provides deeper insight.

L Safety Protection of Automation

Comprehensively improve the security protection capability, you can switch from the alarm state to the normal state in a few minutes.

L synchronous security defense

Microsoft 365 detects and explores different devices, identities, and information to speed up response and recovery.

Windows Defender ATP is a secure platform that can effectively prevent data leakage and realize intelligent protection, detection, investigation and response. Windows Defender ATP protects endpoints from network threats and reduces the overall attack area by eliminating the attack options and paths that attackers rely on most. The new generation of security protection Intelligent Security Graph (ISG) can provide us with protection against attacks by ransomware, undocumented and other types of attacks. Endpoint detection and response provides monitoring behavior and the application of machine learning and security analysis to detect attacks. In addition, ATP can automatically investigate and repair threats, and after confirming the alarm, repair measures can be taken against complex threats within minutes without human intervention.

Windows Defender ATP provides interconnected pre-attack protection through cloud capabilities, machine learning, and behavioral analysis. ATP can block most vulnerabilities, including 0Day vulnerabilities. The function of reputation analysis can guide users away from files and phishing sites with poor reputation. In addition, Microsoft Edge's container isolation can help protect the host operating system from malicious websites.

In the cloud era, security is a top priority. With the advent of the 5G era, the scope of network attacks will be wider and more complex, and the threat to us will become greater and greater. Network security will also be the primary concern of large and small enterprises in the future.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.