Bi-directional Traffic, Precise Rules

Based on the precise rules accumulated by Baidu's long-term security experience, the whole process of the user's access can be restored completely; the contents of HTTP request and response are analyzed bi-directionally for precise detection as far as possible, with the alarm accuracy of 99.5%.

Sandbox Technology

The sandbox technology is used on the identification of special file behavior, and PHP and JSP sandbox developed by Baidu independently have been patented, which support to "Detonate" the files in the sandbox, and identity the hostile attack through file behavior.

Self-identification of Network Assets

The traffic audit can learn the customer's network architecture and asset lists by analyzing all HTTP requests and bi-directional data package of the response, and analyze further whether the weakness information is caused by improper configuration of operation and maintenance, such as the security threats caused by the weak password of operation and maintenance platform, external and non-vulnerability issues of management platform.

Intrusion Event Association Analysis

By using the context detection engine, associate with the same hacker attack behavior, trace the whole process of hacker intrusion, so as to greatly reduce the alarm amount and reduce the trouble of security operation and maintenance personnel.