Pages

22 May, 2015

Huawei unveils protection for Internet of Things

Source: Huawei.
Huawei has unveiled an Advanced Persistent Threat (APT) Big Data Security Solution at Huawei Network Congress (HNC) 2015. The solution leverages Huawei's FireHunter series of security sandbox products, Cybersecurity Intelligent System (CIS), and the USG6000V series of software firewall products.

"While the development of Internet of Things (IoT) makes life more convenient, it also amplifies network security threats," said Liu Lizhu, General Manager of the Network Security, Switch and Enterprise Communications Product Line, Huawei. "Due to the lack of authentication and transmission encryption practices, 70% of IoT devices suffer from security vulnerability. This has the potential to result in security issues spreading to every corner of our lives. However, the deployment of IoT greatly increases the number of security attack targets, making IoT devices the springboard of APT attacks and target for botnet attacks."

Launched at the RSA Conference 2015 in April, Huawei's new FireHunter series of security sandboxes are designed to detect and defend against APT attacks using advanced malware to prevent them from penetrating enterprise networks. Equipped with reputation system and multilayer inspection technology, FireHunter security sandboxes can inspect over 180,000 files per day, which Huawei says is 1.5 times that of other products currently available. It is the only product of its kind in China, and one of three globally, that supports zero-day vulnerability detection for web pages, the company said. One project that deployed Huawei's security sandbox successfully detected 230 unknown threats within two months, 72 of which had never before been encountered in the industry.

Huawei's CIS provides early warning and protection from APT attacks for enterprise networks. "APT attacks are very stealthy and often evade security detection. Hiding in the normal network accesses, APT attacks may remain undetected for a long time after successful penetration. During the latent period, APT attack malware will continue to spread until it has successfully stolen key information," Liu added.

Based on a big data platform, the CIS system conducts extensive correlation analysis of data such as key traffic, logs, contexts, and external information to detect over 350 types of suspicious behaviour, which is two times higher than the industry average. It then flags the infected targets in timely manner to prevent further APT attack penetration, and quickly and precisely traces the source, blocking and eliminating the APT attacks detected in the process.

In addition to hardware security devices, Huawei's APT Big Data Security Solution is able to block and eliminate security threats on cloud, pipe, and devices using virtualised cross-platform software firewalls. The Huawei USG6000V series of software firewalls can be flexibly deployed on agile switches and agile routers. Huawei USG6000V enables ubiquitous network security protection by integrating its comprehensive security functions with an Agile Controller or other software-defined networking (SDN) controllers. 

No comments:

Post a Comment