Tokyo, August 5, 2015 – NRI SecureTechnologies, Ltd. (NRI Secure), a leading provider of information security solutions in Japan, launched a new, integrated security service supplied with EDR (Endpoint Detection and Response) and cyber forensic functionalities in collaboration with Soliton Systems K.K (Soliton), to fight against targeted cyberattacks. This new product offering improves current log monitoring services by covering more than four hundred types of network, security, and IT devices.
When corporate networks are compromised by the latest cyber security threats, including targeted attacks, NRI Secure is able to help protect them by providing high level security analysis through deep log inspection technologies for PCs, at their cutting-edge security operation centers. NRI Secure’s cyber specialists monitor a company’s security 24/7, and can locate a security incident immediately. This service provides cyber forensics on compromised PCs, clarifies the impact of a cyber security breach and remedies the damage of the attack instantaneously.
The paradigm shift from protection to recovery
In cyber security practices, it is essential for companies to combine prevention, detection and response capabilities, and update them on a continuous basis. To fight against the latest targeted cyber security threats, companies are required to deploy practical security solutions focused on treating the damage caused by cyberattacks, rather than only focusing on protection efforts. NRI Secure’s integrated security service with EDR capabilities provides effective detection and response for threats compromising corporate networks.
Detection of security threats at Security Operations Center (SOC)
It is important to monitor logs from security devices in corporate networks at the Security Operations Center (SOC). Since employees’ PCs are frequently utilized as intrusion routes in the early phase of a targeted attack, the software behavior in those PCs should be monitored carefully. However, security monitoring for PCs in corporate networks is proven to be more difficult, in comparison to network devices, because of the wide varieties of the software used on PCs.
NRI Secure’s integrated security platform in collaboration with Soliton’s EDR technologies allows companies to record the software activity without consuming the CPU power. NRI Secure’s cyber security specialists are able to detect the threats invading corporate networks more effectively by performing 24/7 correlation analysis. This analysis correlates both the PC’s log and others at NRI Secure’s security operation centers located in California, U.S.A. and Tokyo, Japan.
In case of a security incident where the corporate network is compromised, companies need to immediately handle the incident by identifying both the compromised area, such as the intrusion route or the invaded PCs, and the impact of attack such as determining what information was leaked.
Without cyber forensics on compromised PCs, it becomes challenging to obtain the correct information because the malware may erase security logs. NRI Secure’s integrated offering with Soliton enables cyber forensics on PCs, and allows corporate networks to detect suspicious security events. Forensics are critical to cyber security efforts because it grants the ability to identify the compromised area and assess the nature of attack quickly and accurately by adding historical and in-depth analysis on PC logs stored in the SOC.
Companies can than proceed to remove or mitigate the threats in their corporate network appropriately. This also allows companies to take a giant step towards avoiding similar security incidents in the future.
NRI Secure launches this integrated security service with EDR to support enterprises in the US and will deliver the service to Japan and around the world in the future.
Media Inquiries :
Public Relations, NRI SecureTechnologies, Ltd.
E-mail：info@nri-secure.co.jp
