ADM

ADM (Advanced Detection Module) is a highly evolved Intrusion detection system that enhances the attack detection capabilities of an organisation employing intelligent features such as customised netflow engine, customised traffic anomaly engine, worm detection engine, etc.

ADM provides vital clues, enabling attacker tracking and analysis. The ADM uses various technologies for detection viz. a signature based detection system that scans network traffic based on pre-documented attack vectors, a collaborative worm detection system that identifies a worm outbreak in the first few minutes, a traffic anomaly engine that monitors anomaly behavior of network traffic a key requirement for detection of various Denial of Service (DoS) family attacks and finally a flow monitor that tracks attackers based on network flows and sessions. ADM integrates with the correlation modules of the RSEM to strengthen the security structure and detect and mitigate any threats or attacks in real time.

ADM at a glance

Advanced log monitoring and intrusion detection system to detect any and every kind of attacks in real time.
Customised netflow engine to analyse and trace the attacks which doubles up as important tool in forensic investigations to identify the culprit.
Customised traffic anomaly engine to detect deviations in network traffic.
Advanced worm detection engines to prevent unauthorised access to the host network
Integration with correlation modules for better results