Intrusion Detection and Prevention System

TopIDP supports defense against zombie behavior such as botnets, Trojan control, worms, mining, extortion, mobile Trojan horse control, and APT, and supports detection of illegal server outreach and covert tunnel communication. TopIDP's rich and multi-dimensional detection methods and detailed and comprehensive log records can effectively avoid the harm caused by zombies.

TopIDP has an authoritative attack rule library, which is periodically updated on a weekly basis. In case of emergencies, the rule library can be upgraded and security incidents can be responded to as soon as possible. TopIDP supports the normal detection of security policies without interruption during rule library upgrade, so as to achieve "smooth upgrade and seamless detection".

TopIDP adopts the method of embedding the threat intelligence library locally, which can implement threat intelligence capability independently without linkage with a third-party threat intelligence platform. Threat intelligence is abundant, with various types of intelligence such as malicious IP address/URL/domain name/file. TopIDP's professional team continuously excavates, researches and tracks the latest intelligence to ensure reliable sources of threat intelligence.

TopIDP has all-round and in-depth attack and defense capabilities, and can accurately detect and block various network attacks, including overflow attacks, code execution, injection attacks, XSS attacks, industrial control vulnerability attacks, and IoT vulnerability attacks. At the same time, TopIDP has anti-escape detection capability, which can prevent escape behavior from the root.