Transcription of 지능형 위협 대응 솔루션 - download.ahnlab.com
1 ahnlab MDS(Malware Defense System) (APT, Advanced Persistent Threat) . (exploit) - - . - ' APT , .. , ahnlab MDS! .. , .. Advanced .. Persistent .. Threat .. 2 C&C.. ' ? .. Switch . IPS/IDS.. Firewall . Internet Router [ ]. ahnlab MDS , , . - . ahnlab MDS (unknown) , APT .. , , (FTP/SMB/CIFS/NFS) / . , , (app) . / .. , , (signature-less) . (static) (dynamic) . (exploit) .. ' .. Windows OS .. / . ( , IP, ) .. C&C . PC ' . PC .. V3 Internet Security/Endpoint Security . - - - ahnlab MDS .. (Execution Holding)' .. ( / URL) (FTP, SMB/CIFS).. (SMB/CIFS, NFS) (USB, CD).. ahnlab MDS. SSL/TLS S/MIME, PGP SSH/SFTP.. ( ). - - - ahnlab MDS (static) (dynamic) .. (exploit) ' ahnlab MDS . , .. (exploit).. Pre-exploitation Exploitation Post-exploitation .. API.. , , , , API OS . (exploit) .. - - - ahnlab MDS , , .. , , . (DICA) .. ahnlab MDS ( ). - - - ahnlab MDS.
2 (Execution Holding, EH)' .. ahnlab MDS (AV, ) .. Reset Internet Reset C&C . Mal-site IP IP (reset) . MDS. (*MTA ). MDS. (MTA ).. URL . MDS .. / . 1 1 1 . ahnlab ahnlab ahnlab MDS MDS MDS. 2 2 2. 5 6. 4 4 4 5. 3 5 3 EH 3 EH. 6 7. ahnlab MDS ahnlab MDS ahnlab MDS. agent agent agent 1. ( ). 1.. 1. 2. - , . 2.. 2. 3. PC / . 3. PC / . 3. PC / 4. (EH) . 4. (EH) . 4. ' 5. ahnlab MDS . 5. ' . 5. 6. ' . 6.. 7.. ahnlab MDS C&C . 2 , ( ), , . ' . (Network Layer). C&C . C&C .. 2 .. ahnlab MDS.. C&C .. (Endpoint Layer).. ahnlab MDS agent - - - ' ahnlab MDS . , , . Internet MDS Manager (Data Viewer).. MDS Manager ahnlab MDS (Host Controller).. / .. ahnlab MDS Agent ahnlab MDS. ahnlab MDS 4000 ahnlab MDS 8000 ahnlab MDS 10000. 35,000 /1 90,000 /1 200,000 /1 .. 700 2,000 5,000 . 800 Mbps 4 Gbps HDD 2 TB 4 TB 8 TB. 1G Copper * 2 ea. 1G Copper * 4 ea. 1G Copper * 4 ea.
3 1G/10G Copper * 4 ea. 1G/10G Fiber * 4 ea. 1G/10G Fiber * 4 ea. 1G/10G Fiber * 6 ea. 550W Redundant Power 550W Redundant Power 750W Redundant Power . (dual) (dual) (dual). 1U, 19 inch 1U, 19 inch 2U, 19 inch (WxDxH, mm) x x x x x x MDS Manager . ahnlab MDS . (OS). Client PC Windows XP SP2 / 7 / 8( ) / 10. Server Windows Server 2003 / 2008 / 2012. OS 32/64 bit . ahnlab MDS Manager MDS Manager 5000AR MDS Manager 10000AR. (DV + HC) 2,000 5,000 .. 5,000 10,000 . (Host Controller ). HDD 6 TB 12 TB. RAID Raid 1 Raid 1. 2 x 1 GbE Ports(Copper) 2 x 1 GbE Ports(Copper). 500W Redundant Power 740W Redundant Power 1U, 19 inch 2U, 19 inch (WxDxH, mm) 437 x 508 x 43 427 x 648 x 89. Host Controller + Data Viewer Data Viewer Host Controller DV(Data Viewer): . HC(Host Controller): .. 220 ( )13493. : : 031-722-8000 : 031-722-8901. 2018 ahnlab , Inc. All rights reserved.
