Threat Detection
Threat Detection is one of the core functions of the runtime security solution based on observability. Through real-time monitoring and analysis of various data during application runtime, it identifies potential security threats. Specifically includes:
-
Anomaly Behavior Detection: Utilizes AI and behavior analysis technology to identify abnormal behaviors that deviate from normal operation patterns.
-
Malicious Activity Identification: Based on unified collected data, identifies known and unknown malicious activities such as malware injection, Cross-Site Scripting (XSS), SQL injection, etc., and can identify fileless attacks like memory shells.
-
Vulnerability Monitoring: Real-time monitoring of application and system vulnerability information, timely identification and remediation of known vulnerabilities, preventing vulnerabilities from being exploited for attacks.
-
0-day Protection: The Threat Detection module can not only detect current security threats but also predict and alert about future potential risks, helping enterprises take preventive measures in advance and reduce security risks.
