Risk Detection
Risk detection refers to the proactive security inspection behavior of obtaining security vulnerabilities or configuration risks at the application, host, network, and product layers through methods such as scanners, port scanning, traffic identification, and policy checks.
Risk Monitoring
Risk monitoring refers to the process of continuously monitoring event alarms by ingesting various security event sources, detecting high-risk events through pre-configured monitoring policies, and then responding to and handling risks according to the corresponding incident response procedures.
Backdoor Programs
A backdoor (Backdoor) generally refers to a program or method that bypasses security controls to obtain access to a program or system.
Regression Testing
Regression testing is a type of software testing that aims to verify whether the existing features of the software remain intact after modifications.
PDR2
PDR2 is a dynamic technical framework that organically integrates Protection, Detection, response, and restoration.
Watering Hole Attacks
A watering hole attack (Watering hole) is a computer intrusion technique that typically targets specific groups (such as organizations, industries, or regions). Attackers first identify the websites frequently visited by the target group through guessing or observation, then compromise one or more of these sites to implant malware, ultimately aiming to infect some members of the target group.
Spear Phishing Attacks
Spear phishing (Spear phishing) refers to a type of phishing attack that originated in Asia and Eastern Europe and targets specific individuals or entities. After identifying a target, the attacker sends emails that appear to originate from the target's company or organization, containing files that are difficult to distinguish from genuine ones. This aims to trick employees into logging in with their credentials, enabling the attacker to install Trojan horses or other spyware to steal confidential information. Alternatively, the attacker may embed an automatic virus downloader on websites frequently visited by employees and continuously update variant viruses within the infected systems, overwhelming the users.