QuantaView is a category of network behavior anomaly detection (NBAD) systems, so you can address three major aspects of computer security:
- Vulnerability Score . Each system that is monitored runs a set of user space applications. Each of these applications has a set of related vulnerabilities, and from this group of vulnerabilities, QuantaView derives a score that represents the severity of the system vulnerability
Worm detection . Worms can pass the 0-day vulnerability to their intended goals, so traditional signature-based intrusion detection systems are not suitable for detecting them.
These types of DDoS attacks are usually spoofed from any source address, and these types of DDoS attacks are usually spoofed from any source address, and for a single IP (or a small group of IP).
The following functions are implemented in the current project:
- Threat detection on local subnet
- worm detection
- DDoS detection
- Vulnerability Score