Intrusion Detection System

TopSentry supports zombie behavior detection of botnets, Trojan horse control, worms, mining, extortion, mobile Trojan horse control, and APT, and supports detection of illegal server outreach and covert tunnel communication. TopSentry's rich and multi-dimensional detection methods + detailed and comprehensive log records can effectively avoid the harm caused by zombies.

TopSentry has an authoritative attack rule library, which is periodically updated on a weekly basis. In case of emergencies, the rule library can be upgraded and security incidents can be detected as soon as possible. TopSentry supports the normal detection of security strategies without interruption during rule library upgrade, so as to achieve "smooth upgrade and seamless detection".

TopSentry adopts the method of embedding the threat intelligence library locally, which can implement threat intelligence capability independently without linkage with a third-party threat intelligence platform. Threat intelligence is abundant, with various types of intelligence such as malicious IP address/URL/domain name/file. TopSentry's professional team continuously excavates, researches and tracks the latest intelligence to ensure reliable sources of threat intelligence.

TopSentry has all-round and in-depth attack detection capabilities, and can accurately detect various network attacks, including overflow attacks, code execution, injection attacks, XSS attacks, industrial control vulnerability attacks, and IoT vulnerability attacks. At the same time, TopSentry has anti-escape detection capability, which can detect escape behavior from the root.