Recently, the globally renowned consulting and advisory service provider IDC released the report "IDC Innovators: China Network Security Risk Situation Awareness System, 2018". In addition to analyzing the development of China's cybersecurity risk situational awareness system, the report also selected five companies as innovators in this direction. Among them, WebRAY, with its situational awareness products and solutions that are tailored to local conditions, have strong business relevance, and focus on solving practical problems, has been successfully selected as one of the innovators.

With the explosive application of cloud computing, big data, and IoT devices, the original network architecture has undergone significant changes, and many organizations face risks in asset management and situational awareness. The current traditional network security defense system has gradually become ineffective and faces severe challenges. The report believes that the network security risk situational awareness system has become an important supporting part of enhancing the effectiveness of network security defense, requiring multi platform compatibility, intelligence, collaboration, tight business coupling, and predictive capabilities, in order to keenly perceive various attack threats from attackers.

WebRAY CEO Quan Xiaowen pointed out that different industries face different security risks, which may come from cybercrime organizations and APT attacks in the dark web, as well as challenges brought by network public opinion and level protection regulations. There are also different requirements for situational awareness, which are difficult to solve through a universal solution. Therefore, we recommend that users deploy strong business related situational awareness solutions based on differentiated industry characteristics and establish business oriented security models.

Facing the needs of different industries, WebRAY has launched customized situational awareness solutions, such as regulatory industry situational awareness solutions that can detect and trace cybercrime, education industry solutions that focus on asset governance, and situational awareness platforms that meet the needs of cyberspace/public opinion. These industry solutions are based on the security and application issues faced by the industry, and are deeply integrated with WebRAY's innovative network security, big data, and data analysis technologies. For example, by utilizing the massive threat data and white samples provided by the distributed security big data platform, and using the LSTM deep learning model in artificial intelligence to detect DGA domain names, these technologies are conducive to better perceiving security threats.

At the product level, WebRAY has launched a network security situational awareness platform that can fully support national standards for threat intelligence. It integrates functions such as security threat detection, threat intelligence utilization, malicious file analysis, network monitoring warning, abnormal behavior tracing and evidence collection, and is closely integrated with security intelligence collection, analysis, and sharing to achieve comprehensive dynamic monitoring of important assets and improve the ability to perceive assets, vulnerabilities, and threats; By abstracting security monitoring scenarios and combining cloud computing and big data mining technologies, accurate threat localization and automatic warning distribution have been achieved, transforming passive monitoring into active warning and improving intelligent security intelligence collection and alarm analysis capabilities.

Network situational awareness needs to be integrated into the overall solution of network security, which is also an important component of network asset security governance, "said Quan Xiaowen." In WebRAY's unique 'Five Step' security governance system, an important step is to use situational awareness capabilities to monitor network assets on a regular basis, in order to quickly detect and manage security risks, reduce the impact of security incidents, and improve emergency response mechanisms.

data sources ：

https://www.idc.com/getdoc.jsp?containerId=CHC43919818