Product Overview

Personalized presentation of global situation: equipped with four modules of comprehensive situation awareness, asset situation awareness, alarm situation awareness, and threat situation awareness, comprehensively visualizing and displaying information. Various data display formats and interface layouts can be personalized according to the level of attention, allowing users to clearly grasp the security situation.

Features

Personalized presentation of global situation:Equipped with four major modules: comprehensive situational awareness, asset situational awareness, alert situational awareness, and threat situational awareness, it comprehensively visualizes and displays information. Various data display formats and interface layouts can be personalized according to the level of attention, allowing users to clearly grasp the security situation.

Industrial asset management:Unify the management of different asset types in the industrial asset management environment, display non managed asset details, manage asset status, and group assets for convenient asset search and management by different users; Combining assets from the same network segment through asset network discovery makes it easier to discover, search, and locate assets.

Host information control:Support viewing basic information such as CPU utilization, memory utilization, disk utilization, software list, patch list, process list, etc., and batch policy issuance is possible.

Equipment baseline management:It can verify the compliance of basic configuration requirements for operation stations, engineer stations, servers, middleware, and network equipment, provide vulnerability data for risk assessment, and inform users of abnormal situations.

Industrial network equipment is perfectly compatible:Through continuous research and investment in the field of industrial network security, it has become compatible with the vast majority of production equipment, network equipment, and security devices in mainstream industrial environments.

Recovery and tracing of attack behavior:By tracking and perceiving the current network attack situation in real time, associating and recording information such as attack time, attack source IP, target IP, attack type, attack method, attack route, etc., the attacker's current attack stage can be monitored in real time, and the attack path can be restored.

Intelligent correlation analysis of threat intelligence:By integrating data provided by third-party threat intelligence vendors, we can conduct correlation analysis on malicious IP, domain names, URLs, and other threat intelligence to promptly alert the network of security risks.

Global perception of unknown threats:Comprehensively evaluate the security situation of the entire network through various security attributes such as network attack behavior, malicious code propagation, vulnerability distribution status, and important system risks. Through techniques such as deep mining, potential threat analysis is conducted on the reported data, and abnormal behavior characteristics are extracted and compared with the original logs for comprehensive perception of unknown security threats.

Comprehensive coverage of industrial fingerprint database:Built in fingerprint for nearly 1000 industrial control devices from over 200 manufacturers including Siemens, Schneider, Honeywell, etc.

customer value

Outstanding input-output ratio:In the early stage, a situational awareness platform was quickly built with low cost and low manpower, and seamlessly expanded and upgraded in the future to continuously improve data quality, analysis capabilities, and research efficiency.

Platformization of Security Capability:The analysis process and experience of individual personnel can be gradually solidified into platform analysis rules, empowering organizations and teams.

Effective safety work guidance and evaluation:Based on dynamic data analysis of threats and assets, provide clear guidance for the deployment focus of current security work, and continuously track and evaluate the effectiveness and trends of security work.

Platform Architecture