AhnLab - Malware Defense System

Advanced Persistent Threats better known as APTs, are gaining notoriety, and while historically one could circumvent these cyber attacks via traditional systems such as firewalls, antivirus, network access controls and intrusion protection systems, these threats are becoming more sophisticated and difficult to detect and prevent.

The malware can arrive in a number of different forms:

  • Disguised executable files using common application icons
  • Distributed customized malware via common operating system or application
  • Used application update servers to distribute malware
  • Inserted malware into Windows help (hlp) files
  • Included malware in compressed files, along with application installation files.

AhnLab Malware Defense System is the only corporate security solution that combines local and cloud-based analytics to stop Advanced Persistent Threats (APTs) and Denial of Service (DDoS) attacks. It is the only advanced persistent threat protection solution that provides both host and network based protection. AhnLab was one of only two companies to issue a press release about the results MDS achieved in a NSS Breach Deduction Product Analysis study issued in July.

AhnLab MDS applies malware recognition and remediation with real-time blocking of malicious network traffic and dynamic disruption of active security breaches. This advanced security system protects endpoints, servers, networks, and cloud resources.

How does it work:

Ahnlab MDS utilizes an automated threat response process that includes:

  • Collection and analysis of data for all major internet protocols
  • Two-way monitoring of traffic inflows and outflows on the network
  • Monitoring and blocking harmful site access and Command & Control (C&C) communication
  • Treating (remediating) hosts that are suspected of being infects (not just detecting and identifying them)
  • Extracting suspicious files in the host

One platform makes it easy to deploy and manage

  • Enterprise-grade web and email monitoring within a single appliance
  • Complete analysis across malware signatures, malware behavior and content-based threats (data leakage)
  • Support for copper and fiber network topologies – up to 10 Gbps of bandwidth over 10 ports within a single device
  • File processing 16 times faster than with alternative technologies
  • Detection rates 1.6 times higher than alternative technologies

Benefits

  • Layered approach protects everything; networks, servers, endpoints, and cloud resources
  • Simplified management and rapid response to APTs anywhere across the corporation
  • Single source for security intelligence, product updates, systems management, and technical support
  • Superior analysis of potential threats, including detailed bodies of evidence for behavior that is suspicious but not definitively good or bad
  • Automated malware removal and targeted disruption of malware network activity without effecting normal business operations

Read the overview white paper - Protect against APTs and zero-day threats, read the product overview: AhnLab Brochure.

To find out more about this product, please contact us, as well you can download the whitepaper.