Sinomenia cloud security takes server security as the core, adopts adaptive security architecture, integrates prediction, defense, monitoring and response capabilities, builds a host-based security situation awareness platform, provides users with continuous security monitoring, analysis and rapid response capabilities, and helps users realize secure unified policy management in diversified business environments such as public cloud, private cloud, hybrid cloud, physical machine and virtual machine, effectively predict risks, accurately perceive threats, improve response efficiency, and comprehensively protect the security of enterprise digital assets and the efficient development of business. Wanxiang · Host adaptive security platform adopts adaptive security...
Sinomenia cloud security takes server security as the core, adopts adaptive security architecture, integrates prediction, defense, monitoring and response capabilities, builds a host-based security situation awareness platform, provides users with continuous security monitoring, analysis and rapid response capabilities, and helps users realize secure unified policy management in diversified business environments such as public cloud, private cloud, hybrid cloud, physical machine and virtual machine, effectively predict risks, accurately perceive threats, improve response efficiency, and comprehensively protect the security of enterprise digital assets and the efficient development of business.
Ivy Wanxiang-Host Adaptive Security Platform
The adaptive security architecture is adopted to effectively solve the passive situation of traditional defense-focused means, adding powerful real-time monitoring and response capabilities to the system, helping enterprises to effectively predict risks, accurately perceive threats, improve response efficiency, and ensure the final barrier of enterprise security.
Adaptive Security Architecture Core Concepts
Continuous monitoring and analysis
security capability collaborative linkage
Core Architecture
Agent-Host Probe
Agent can be installed on the host with only one command, and automatically adapt to various physical machines, virtual machines and cloud environments. It runs stably and consumes low energy. It can continuously collect host process, port, and account information, and monitor processes and network connections in real time. It can also communicate with the server, perform tasks issued by it, and actively discover host problems.
Engine-Security Engine
As the information processing center of the core platform, Server supports horizontal and distributed deployment. It can continuously analyze, detect and save the information and behaviors received from each agent. It can find security risks such as vulnerabilities and weak passwords, and abnormal behaviors such as Webshell writing behavior, abnormal login behavior, abnormal network connection behavior, and abnormal command calling from various dimensions of information, thus realizing real-time early warning of intrusion behavior.
Console-Control Center
It interacts with users in the form of a Web console, clearly displays various security monitoring and analysis results, and provides real-time alarms for major threats to help users deal with problems better and faster, and provides centralized security tools to facilitate users to perform system configuration And management, security response and other related operations.
