【2017年整理】趋势科技.ppt

* * * * What solution components are required? Vulnerability Prevention: This proactive phase requires capabilities to pre-empt attacks by Assigning risk ratings to alert administrators to specific viruses correlated with system vulnerabilities, and pinpoint patches that will help prioritize vulnerabilities that need to be fixed to prevent exploits Helping IT selectively isolate unpatched machines for specific operating system vulnerabilities before or at the onset of an outbreak to stop virus propagation outside of the affected LAN segment; be configurable to provide a link to redirect the user of the violating machine to patch management server to obtain the latest patches Checking devices for latest pattern files, scan engine, and antivirus software from major antivirus vendors - to block noncompliant machines from access the network; be configurable to provide a link to redirect the user of the violating machine to updated antivirus, scan engine, and pattern files or force a cleanup Outbreak Prevention: The outbreak prevention phase is the critical period when a threat has been identified but a pattern file or patch has not been deployed. Without sufficient information, IT managers struggle to identify protective actions and deploy them effectively across the organization. This phase requires capabilities to prevent or isolate/contain attacks by Spotting and informing IT about potential virus outbreaks by looking for network segment traffic flow, anomalies, number of connections to/from clients/servers Deploying threat-specific mechanisms which are precise and can be applied at network segments would help isolate infected, vulnerable or high-risk segments, while keeping rest of the business up running Virus Response: Virus scanning and detection is done at the network layer and the application layer for comprehensive protection; While 趋势科技 antivirus products provide protection at the file-application layer, you require a new layer of protection for Scanning