Security Brain BAS
Product
Security Brain Breach and Attack Simulation (Security Brain BAS)
Overview
360 Security Brain BAS intelligently and quantitatively assesses and continuously improves the effectiveness of security systems. It has formed a complete and mature automated assessment mechanism by leveraging 360 company's industry-leading knowledge base of attack techniques and tactics. It can comprehensively test the in-depth defense systems deployed by customers to measure their overall effectiveness and gaps in defending against attacks. It provides customers with targeted improvement suggestions to help them build a closed-loop control system that continuously improves security operation capabilities.
360 Security Brain BAS subscribes to the 360 company’s Security Brain knowledge cloud and the security expert service, and it adopts the method of controllable simulation of real attacks to test the effectiveness of security products. 360 Security Brain BAS synchronizes the updates of attack techniques and tactics from the cloud side so that it can continuously provide customers with the function to assess their defense capability effectiveness.
North-South Attack Simulation
Assess the capability of perimeter defense equipment including firewall, intrusion prevention system, Web application firewall, and anomalous traffic cleaning equipment.
East-West Attack Simulation
Assess the capability of perimeters or key network node defense equipment including lateral movement, abnormal traffic detection, intrusion prevention, APT detection and others.
Endpoint Security Protection Capability Assessment
Simulate endpoint-side attacks or simulate running of malicious files. The assessed objects are usually security protection products such as EDR, EPP, and CWPP deployed on endpoints.
Email Security Protection Capability Assessment
Identify potential security weaknesses with systemic attack simulation assessment applications and take preventive measures.
Efficiency Quantification, Orderly Planning
Simulate sending of phishing emails to assess the capability of email security gateways in identifying phishing emails and malicious attachments.
Benefits
Take the Burden Off for the Management Team
With the help of 360 Security Brain BAS, the management team can intuitively understand the cyber security defense capability, clearly recognize the value and ROI brought by security defense, and have a quantitative understanding of the company's current defense level.
Give CISOs the Valuable Information
360 Security Brain BAS helps CISOs to check whether the purchased security defense equipment is really effective and whether they can get the most out of the equipment, thus getting an idea of the gap between the expected and actual results of their security construction plan, providing a scientific and quantitative basis for future planning, construction, optimization, and other decisions.
Help the Security Team Improve the Overall Defense Capability
360 Security Brain BAS helps the security team of a company comprehensively assess the defense capability from the dimensions of perimeter, intranet, endpoint, email, and so on.
It conducts round-robin assessment to continuously improve the security defense capability. It provides reliable data support for security equipment selection and quantifies the results. It automatically generates a report of security weaknesses and suggestions for the company so as to continuously improve the company’s security defense capability and help them build a robust security defense system.