We are looking for companies with knowledge of the following requirements:
The high-performance and real-time identification and defense engine for network attack is based on machine learning. The response time for the engine to judge is about 10-100ms, and it supports self-learning mode and offline operation.
Possess high-performance distributed data storage and flexible SPL solution, support 2N, 2N+1 arbitrary clusters, and maintain high consistency of cluster data.
Keyword description of technical requirements, and the current problems:
False positive rate:
At present, the identification based on features of attack signature has a high false positive rate. In some traditional scenarios, the false positive rate is as high as 20% or more.
Unknown attack identification technology:
At present, the identification technology based on characteristics of attack signature has a lag, and cannot identify unknown attacks. It fails to deal with new vulnerabilities or new attack methods, so an unknown attack identification technology with high accuracy is required.