New-generation Threat Awareness System is an integrated solution that provides customers with detection, analysis, response, and trace back for advanced threats. Based on network traffic and terminal EDR logs, using threat intelligence, rules engine, file virtual execution, machine learning and other technologies to accurately detect the intrusion behavior of known advanced network attacks and unknown network attacks against hosts and servers in the network. At the same time, it uses the local big data platform to store and query traffic logs and terminal logs and combine threat intelligence and attack chain analysis to analyze, investigate and trace back events.

Strength

• Accurate detection of advanced threats
  Compared with the traditional security detection scheme, the New-generation Threat Awareness System can quickly detect known and unknown advanced network attacks with high accuracy and low false positive rate.
• Rapid response to major security incidents
  Based on the context of threat intelligence, the New-generation Threat Awareness System can help security operators discover, diagnose and handle major security incidents such as Wanna Cry, APT Events, NotPetya, Marai Botnet.
• Trace back and analysis of cyber attacks
  The New-generation Threat Awareness System can restore and store the metadata of network traffic, which can help customers to trace back the network attacks and analyze the attack chain, infected surface and information leakage.

Product Features

• Advanced threat detection
  Using threat intelligence, virtual file execution, intelligent rule engine, machine learning and other technologies, New-generation Threat Awareness System can detect and discover known advanced cyber attacks and unknown cyber attacks which covers APT attacks, ransomware, WEB attacks, remote control Trojans, botnets, stealing Trojans, spyware, network worms, mail phishing and other advanced attacks.
• Alarm response handling
  The New-generation Threat Awareness System provides customers with a list of attack alerts, statistics, queries, surveys, etc., combined with contextual threat intelligence and automated survey analysis to help security operator quickly identify and handle alarm events.
• Attack backtracking analysis
  New-generation Threat Awareness System presents an attack completion process for customers, analyzes the attack behavior of hackers from the perspective of attack chain, which covers the stages of reconnaissance, intrusion, command control, horizontal penetration, data leakage, and trace back cleanup of network attacks and helps customers trace back and deeply analyze network attacks.
• Abnormal behavior detection
  Based on network traffic data, New-generation Threat Awareness System uses big data analysis and machine learning techniques to establish a network anomaly behavior detection model to detect and discover unknown attacks and internal violations.

Product Features

• Advanced APT detection and tracking capabilities
  Our professional security experts analyze and track APT attacks. 2017, there were as many as 11 research reports on AP, and a total of 38 APT organizations that launched attacks worldwide. The attacks launched by these APT organizations have affected at least 10,000 computers, and the attacks ranged from 31 countries across the globe.
• Advance threat intelligence capabilities
  Based on multi-dimensional, global data collection capabilities, the use of cloud big data technology automated processing and the top security research team's manual operations to provide customers with accurate threat intelligence.
• Unique endpoint EDR collaborative analysis capabilities
  It can cooperate with the terminal EDR system to help users quickly locate infected hosts and malware, and improve the response and disposal capabilities of network attacks.
• Operational and retrieval capabilities of massive data
  New-generation threat awareness system innovative adopts search engine technology as the core technology of local data storage and retrieval so that can greatly improve the retrieval performance and provide enterprises with terabytes of data fast search capability and also can provide solid technical support for large-scale data storage, attack evidence retention and query, and real-time correlation analysis.