API Deep Dive. OESIS Modules

Transcription

1 API Deep Dive OESIS Modules

2 Agenda What is OESIS Build Endpoint Security Features with OESIS API OPSWAT Certified Security Applications Program Roadmap Additional Resources Q & A

3 What is OESIS Endpoint management SDK that enables customers to build security features Vulnerability Assessment Report 1,000,000+ vulnerable binaries from 15,000+ application versions Infection Detection Indication of comprise, quickly assess system security using 3 OPSWAT unique technic Peripheral Management Monitor and manage portable media device, block / unblock USB device and etc. Application Removal Silently remove 1,200+ applications including toolbars, ransomware and etc. Device Compliance Detect, classify and manage 5,000+ security applications

4 License OESIS Framework and many more.

5 Build Endpoint Security Features with OESIS 200M+ Endpoints managed 5,000+ Third-party applications from 800+ vendors 140,000+ APIs supported

6 Build Endpoint Security Features with OESIS Vulnerability Assessment Infection Detection Peripheral Management Application Removal Device Compliance

7 Vulnerability Assessment Product name OPSWAT Leading solution in the market Product name Use 7-Zip case: I want to check whether v there x are known Notepad++ vulnerabilities on my system v or in xthe ActivePerl v x data that is being brought to my network. Adobe AIR v v Adobe Flash Player v v Beyond Compare v x Cisco AnyConnect VPN Client v v ESET Endpoint Security v x FileZilla v x Google Chrome v v Internet Explorer v v Microsoft Excel v v Microsoft Filemon x v Microsoft Lync v v Microsoft OneNote v v Microsoft Outlook v x Microsoft PowerPoint v v 250+ Microsoft top Process vulnerable Explorer applications x v Microsoft Publisher v v 10,000+ Microsoft Regmon associated CVE with x severity v information Microsoft Visio v v 1,000,000+ Microsoft Word identified vulnerable v hashes v Microsoft XML Core Services (MSXML) x v 30+ Mozilla times Firefox faster than existing v solutions v on the market OPSWAT Leading solution in the market Oracle Java JRE v v Paint.NET v x PuTTY v v QQ v x Secunia PSI v v Silverlight v v Skype v x TeamViewer v x TortoiseGit v x TortoiseSVN v x VLC media player v v vsphere Client v x Windows Defender v x Windows Firewall v x Windows Media Player v x Windows Update Agent v v Windows VPN Client v x WinPcap v x WinRAR v v WinSCP v v Wireshark v v Zoom v x

8 Infection Detection Use case: I want to quickly verify whether my system is compromised. Scan memory components With Metadefender server or our cloud Validate connected IPs Against 13 cloud IP reputation engines Search for repeated threats From local installed antimalware solution

9 Infection Detection

10 Infection Detection Scan memory components With Metadefender server or our cloud

11 Infection Detection Validate connected IPs Against 13 cloud IP reputation engines

12 Infection Detection Search for repeated threats From local installed antimalware solution

13 Peripheral Management Use case: I want to block any USB that is connected to my device until the data on it is examined. OESIS BLOCK ACCESS EXAM THE DATA UNBLOCK MEDIA

14 Application Removal Use case: I want to automatically remove all the unwanted applications, I want to uninstall my legacy security application prior to install the new one. Support for Endpoint Security Suites Support for Potentially Unwanted Applications Silent uninstall without user interaction Even when end-users have forgotten their passwords Even if a prior manual uninstall attempt failed to complete Even if product self-protection enabled

15 Device Compliance Use case: I want to know what kind of applications are running on my system/on my network. Signature base and system generic detection 500+ applications detected on a physical device on average 300+ applications analyzed and labeled Potentially unwanted applications, ransom ware, etc. 15 different security categories Fast response and small memory footprint Same size as msprint.exe, 30% of any browser instance

16 Challenge from BYOD Bring Your Own Device 16

17 Device Compliance Use case: I want to ensure end-user s own device is compliant before connecting to my network. Retrieve application status information What is anti-malware protection state, virus definition, last scan time, and threat history Which drive volume is encrypted Whether system has missing patches Apply remediation based on security policy Trigger full-system scan Update malware definitions Install missing patches And 100+ more unique feature APIs

18 Supported Applications

19 Auto Update Always up to date with hands-free solution Reduce discrepancy due to release frequency Continuous delivery Specific OESIS versions deployed based on your choosing Flexibility to roll back any time

20 Integrating to Metadefender Product Family

21 API C-JSON I/O Plug and play modules allow you to only deploy the components you need Flag JSON I/O, can be integrated with C++, C#, Ruby, Java, Python, PHP, and nearly any programming/scripting languages Detail sample code and developer guide allows for complete integration within three hours from the start

22 OESIS Real World Deployment

23 OPSWAT Certified Security Applications Program Quality False Positive Compatibility

24 Gold Certification Quality False Positive Compatibility Ensure solutions pass security auditing AV-TEST AV-Comparatives Weed out rogue security applications Reduce false positive alarms Eliminate unnecessary operation slowdown Guarantee compatibility with leading CASB, NAC, SSL-VPN technologies Reduce support costs due to security policy incompatibility

25 OPSWAT Market Share Report

26 Roadmap Features Support for open source Linux projects based on OESIS Report vulnerabilities on system binaries and hardware drivers Support for Windows phone and more IoT Android Wear Apple Watch and Apple TV Amazon Echo Dot NFC rings

27 Additional Resources API documentation: Support charts:

28 Jianpeng Mo Senior Director of Software Engineering Thank You! O F C E jianpeng@opswat.com 398 Kansas St. San Francisco, CA