Product Overview

The industrial control host security guard system is a software product that provides security reinforcement for industrial control system hosts such as operator stations, engineer stations, and servers. The product subverts the traditional antivirus software's "blacklist" concept and adopts a lightweight "whitelist" approach that is opposite to it. It can quickly and effectively prevent the execution, infection, and spread of industrial control malicious code such as Stuxnet virus and BlackEnergy on the host. On this basis, security protection and management have also been implemented for mobile storage media such as USB drives to prevent viruses and Trojans from cross infecting internal hosts through mobile storage media. The product has two forms: standalone version and network version. The network version can centrally control the host security guards deployed on the host, including unified policy issuance, software management, log viewing, and peripheral control.

Features

Self learning program whitelist:One click intelligent learning of program files and other executable file features in industrial control host systems, quickly establishing whitelist libraries and security baselines.

Block the execution and spread of virus trojans:Accurately block all executable files outside the whitelist security baseline from running on the host, effectively isolate viruses, trojans, and other malicious code, and prevent them from spreading to the network through the host.

Trusted certificate whitelist:Checking the signature certificate of executable programs enables applications with trusted vendor certificates to be executed, thereby simplifying the cost of publishing and deploying trusted vendor applications.

Core system file protection:Provide integrity checks and security protection for important configuration file paths and registry of the host operating system to prevent damage from malicious software.

USB management:Control the connected USB devices and support three management methods for mobile storage media: "read-only", "read-write", and "disable", to prevent storage media carrying virus threats from infecting the host.

Comprehensive and rich alarm information:The types of alarm information tags include program whitelist alarms, USB peripheral usage non-compliance alarms, registry and critical configuration damage alarms, whitelist security baseline alarms, etc., which visually display the security issues that exist in the system.

Compatible with more industrial control systems, with low resource consumption:Fully supports old Windows systems that Microsoft has stopped maintaining in industrial control environments, and is compatible with various manufacturers' industrial control software, without accidentally killing industrial control system files. Small system space occupation, low performance requirements for the industrial control host system, and no impact on the operation of monitoring software and other configuration software in the industrial control system.

典型部署

• The standalone version is installed on various hosts (engineer stations, operator stations, and various servers) in industrial networks

• In addition to installing software on the host, the network version also requires the deployment of GTEC-UM devices in the network for centralized management