How Does It Work?

The three IDS detection methodologies which Sentry Defense used to detect incidents are:

• – Signature-Based Detection compares signatures against observed events to identify possible incidents. This is the simplest detection method because it compares only the current unit of activity (such as a packet or a log entry, to a list of signatures) using string comparison operations.
• – Anomaly-Based Detection compares definitions of what is considered normal activity with observed events in order to identify significant deviations. This detection method can be very effective at spotting previously unknown threats.
• – Stateful Protocol Analysis compares predetermined profiles of generally accepted definitions for benign protocol activity for each protocol state against observed events in order to identify deviations.

What Can You Do with Sentry Defense?

Sentry Defense’s Intrusion detection systems (IDS) and intrusion prevention systems (IPS) constantly watch your network, identifying possible incidents and logging information about them, stopping the incidents, and reporting them to security administrators.

In addition, some networks use IDS/IPS for identifying problems with security policies and deterring individuals from violating security policies. IDS/IPS have become a necessary addition to the security infrastructure of most organizations, precisely because they can stop attackers while they are gathering information about your network.

Benefits of Sentry Defense

The information provided by the Sentry Defense System  will help to uncover:

• • – Security policy violations, such as systems or users who are running applications against policy.
  • – Infections, such as viruses or Trojan horses that have partial or full control of internal systems, using them to spread infection and attack other systems.
  • – Information leakage, such as running spyware and key loggers, as well as accidental information leakage by valid users.
  • – Configuration errors, such as applications or systems with incorrect security settings or performance-killing network misconfiguration, as well as misconfigured firewalls where the rule set does not match policy.
  • – Unauthorized clients and servers including network-threatening server applications such as DHCP or DNS service, along with unauthorized applications such as network scanning tools or unsecured remote desktop.

Please contact us to discuss your Cybersecurity needs:

The post SENTRY DEFENSE appeared first on Vayucast.

IdentiCore automates the creation, modification, re-certification and termination of identities throughout the user lifecycle. It features an intuitive, business-friendly user interface to simplify provisioning requests and help managers make intelligent access decisions for their employees. It also includes enhanced reporting and analytic capabilities to monitor user entitlements and activities. IdentiCore has been used to provide the following capabilities:

• – Advanced authentication
• – Mobile authentication
• – Push authentication
• – Adaptive risk authentication
• – Centralized and distributed authorization
• – Federation
• – Single sign-on (SSO)
• – User self-services and social sign-on
• – High-availability and scalability
• – Adaptable monitoring and auditing services

Benefits:

• It empowers line of business managers to automate and define users’ access across the enterprise.
• It reduces complexity of enterprise identity management with centralized policy, integrated identity lifecycle management and support for third-party environments.
• It improves user assurance with strong authentication integration, audit reporting and closed-loop user activity monitoring.
• It provides effective and actionable compliance with centralized identity and access management across the enterprise.

Please contact us to discuss your Cybersecurity needs:

The post IDENTICORE appeared first on Vayucast.

WiFi AirDome monitors your entire WLAN, forwarding traffic summaries, captured by distributed sensors, to a central server. Those summaries are aggregated, correlated and analyzed for security events. The resulting alerts may be displayed, forwarded to another system or logged in a database for future reference. Of course, these summaries can also be used to monitor WLAN performance.

WiFi AirDome combines the information collected from your network of sensors or access points with the analytical power of an intelligent central console to provide 24/7 network monitoring, automate security, and enable regulatory compliance, remote troubleshooting and locating-fencing services. WiFI AirDome also provides the following capabilities and performance alerts as part of the platform:

• – Hidden station detection
• – Radar interference detection
• – Channel with high noise level
• – AP overloaded by stations
• – Channel overloaded by APs or traffic
• – Constant traffic sent/received by client
• – Improper or inconsistent AP configuration
• – Excessive retries or CRC errors
• – Excessive roaming or re-association
• – Excessive low-speed transmission
• – Excessive fragmentation

Physical location detection is a pivotal aspect of WiFi AirDome. 802.11 attacks are often carried out in close proximity to the WAP and can be performed in an extremely short timeframe. Therefore, the response to attacks needs to not only be logical, like standard IDSs (i.e. Block the offending IP address), the response also needs to incorporate the physical deployment of individuals or security personnel to identify the attacker – and the response must be timely. WiFi AirDome provides the timely notification and necessary information to respond to intruders attempting to break-in through your WiFi network.

Please contact us to discuss your Cybersecurity needs:

The post WIFI AIRDOME appeared first on Vayucast.