Threat Intelligence
Threat intelligence is evidence-based knowledge that includes context, mechanisms, indicators, implications, and actionable advice about an existing or emerging threat or hazard to assets. It can be used to inform decisions regarding the subject's response to that threat or hazard.
Zero Trust Security
The core idea of zero trust security is that enterprises should not automatically trust any person, device, or thing inside or outside the network. Instead, they should verify any person, device, or thing attempting to access enterprise systems before granting authorization. A zero trust policy means trusting no one unless the network explicitly knows the identity of the requester. In a zero trust network environment, all network traffic is untrusted. Security professionals adopt a least-privilege policy to manage and protect all resources, ensure all resources are accessed in a secure manner, and detect and log all network traffic.
Endpoint Security
Terminal security refers to terminal devices that are built on trusted computing, comply with enterprise-defined security baseline standards, and are adopted to ensure the security of computer systems.
Link Security
The network link is encrypted layer by layer through transport protocols, SSH encryption, and TLS encryption, and carries the identity authentication result.
EDR
EDR, also known as Endpoint Detection and Response, provides full-network security posture visibility, detects intrusion risks within seconds, integrates the latest threat intelligence from the cloud, delivers real-time alarms through visualized situational awareness, and enables rapid response and swift risk mitigation. With over a hundred advanced threat behavior detection rules and anomaly detection based on baseline characteristics of user access activities, EDR promptly identifies advanced threats. By integrating with the cloud to push detection rules and expert policies in real time, it provides immediate access to solutions for trending security incidents.
Advanced Persistent Threat
An Advanced Persistent Threat is an attacker with specialized expertise and significant resources who launches long-term, planned, and organized attacks against specific targets through multiple attack vectors.