Identification technology for cyberattack

Tech & Electronics;

The high-performance and real-time identification and defense engine for network attack is based on machine learning. The response time for the engine to judge is about 10-100ms, and it supports self-learning mode and offline operation.

Possess high-performance distributed data storage and flexible SPL solution, support 2N, 2N+1 arbitrary clusters, and maintain high consistency of cluster data.

Keyword description of technical requirements, and the current problems:

False positive rate:

At present, the identification based on features of attack signature has a high false positive rate. In some traditional scenarios, the false positive rate is as high as 20% or more.

Unknown attack identification technology:

At present, the identification technology based on characteristics of attack signature has a lag, and cannot identify unknown attacks. It fails to deal with new vulnerabilities or new attack methods, so an unknown attack identification technology with high accuracy is required.