IDS (Intrusion Detection System)
Real-time Intrusion Detection and Response on Website & Application Server
Overview
-
Latest Attacks Method Detection
True positive rates are increased with constant signature management and detection patterns for new threats. Samsung’s TI DB and advanced detection policy are applied to offer automatic analysis on IDS-detected attacks.
-
Optimized Cloud Operation
Agent-based IDS collects/analyzes inbound cyber attacks to categorize the type of an attack and detect hacking attempts.
※ Customers are responsible for installing agents. (Installation/deletion guidelines from dedicated specialists are available upon request.) -
Efficient Measures & Support
Real-time monitoring and analysis of IDS events are notified to the customer to enable preemptive response to security threats. Details of detected events (IP/Port, target IP, detected time, etc.) are displayed on the dashboard.
Service Architecture
- Web Service Users → Internet → WAF, DDOS Protection → IDS Agent - Web Server(VM), IDS Agent - Web Server(VM), IDS Agent - Web Server(VM) → Security Log Collection → Control System : Control/Analysis Expert → Monitoring/Detection
- Web Service Users → Internet → WAF, DDOS Protection → Security Log Collection → Control System : Control/Analysis Expert → Monitoring/Detection
Key Features
-
Intrusion detection and analysis using agents installed on VM
- Offer detailed logs on intrusion detection
- Provide 24/7/365 event monitoring and issue a warning in case of event detection
(Emergency event warning : within 1 hour; General : within 4 hours after confirmation) - Automatic updates on patterns for attack detection
- Dashboard and report screen (attack type, target IP, alarm list, etc.)
Pricing
-
- Billing per VM with detection policy
- Web and WAS servers
-
- Monthly subscription (monthly billing)
Whether you’re looking for a specific business solution or just need some questions answered, we’re here to help
