IPS (Intrusion Prevention System)

Get Started

Real-time Detection and Prevention for Intrusions in Homepage Server & Application Server

IPS provides real-time defense mechanisms by continuously updating intrusion detection policies that keep up with the countermeasure against the latest security threats. With packet monitoring, IPS can detect at the application layer.

Overview

  • Detection of the Latest Attack Tactics

    Detection rate is improved with signature management and detection pattern updates in readiness for the latest security threats. IPS provides its service by performing correlation analysis of attack patterns detected by IPS with configured patterns in SIEM (Security Information and Event Management).

  • Optimized for Cloud Operations

    IPS provides threat detection services optimized for cloud environment. And the expert security teams can promptly respond to the security threats.

  • Effective Countermeasure and Support

    By monitoring events in real-time and providing notification upon analysis, preemptive response to security threats can be achieved. Event information is available in the monthly report.

01

04

Architecture Diagram

Samsung Cloud Platform
  • Security Zone(Multi-AZ) : DDoS Protection → ( Secured Firewall → IPS: Hacking/Attacks, Detection/Response ) → WAF
  • service Pool : VPC ( WAF → disc )
  • Real-time Monitoring : 24/7 Security Monitoring → IPS
Attacker → Hacking Attacks → Samsung Cloud Platform Legitimate service user → Samsung Cloud Platform's DDoS Protection Attacker → Hacking Attacks → Samsung Cloud Platform

Key Features

  • Intrusion detection and analysis
    1. 24/7 event monitoring
    2. Raw data based in-depth analysis
    3. Latest threat detection pattern updates reflecting security trend information
    4. Detection pattern optimized for effective real-time event response
  • Intrusion response
    1. Provide IP information in the event of attempted attacks on customer's servers
      (Network firewall on Samsung Cloud Platform recommends blocking)
  • Monitoring information
    1. Alert raising in the event of event detection
    2. Provide monthly reports (alert list and information, etc.)

Pricing

    • Billing
    • Subscription based on the number of VMs associated with its specification (e.g. vCore, Memory)
    • Monthly subscription (monthly billing)
Let’s talk

Whether you’re looking for a specific business solution or just need some questions answered, we’re here to help