Security Verification and Offensive-Defensive Practice

Cyritex 2023 new product launch, SaaS version free trial plan starts now!

On 1 August, the "Continuous Steps in Security Validation" SecVision 2023 New Product Launch was successfully concluded. Focusing on brand new security validation products and technologies, the launch released version 3.0 and the SaaS version of the new SecVision Security Metric Validation Platform, and simultaneously launched the SaaS Free Trial Programme.

▍SecVision, Actively Exploring and Growing in the Field of Security Validation

Since the founding of SecVision, the SecVision Security Metric Validation Platform has successfully iterated through multiple versions. The SecVision team has continuously researched security validation related technologies, constantly absorbed market feedback, optimised the product by applying it to actual security operation scenarios, and remained focused on global technology developments, striving to achieve truly valuable and meaningful product innovation. The founding team of SecVision unanimously believes that the product vitality of SecVision comes from user experience and feedback. SecVision continuously innovates, polishes, and optimises its products to help users validate their own defense systems in real time and effectively, so as to achieve combat-oriented, systematic, and normalised cyber security protection.

▍Brand New Release: SecVision Security Metric Validation Platform 3.0

The launch event introduced version 3.0 of the SecVision Security Metric Validation Platform, which, building on previous versions, completed the adaptation work for information technology application innovation (ITAI) systems and multiple domestic CPU architectures. One of the major innovations of the platform architecture is the introduction of detection bots and the upgrade of the original AI offensive and defensive bots to validation bots, establishing verification scenarios that are more suitable for users' actual use, and forming a complete closed loop of validation operations from detection and identification, to security validation, and then to judgement and handling.

In addition, the platform has improved the convenience of bots from deployment to daily use, while also optimising the user experience of configuring validation actions, including the new topology map feature, the addition of execution parameter configurations, flexible modifications of built-in scenarios, and action orchestration. SecVision has also improved the presentation of validation results in terms of log uploading, document exporting, log matching accuracy, and report filtering, thereby providing core value to users.

In the new platform, to meet customer needs, SecVision has added a custom validation action feature, which can help customers with certain security technologies quickly transform their knowledge into validation methods, and also easily complete validation work for customers with specific validation scenario needs. Currently, 9 validation action types of custom features have been developed, and more custom validation action types will be opened in the future.

SecVision continuously explores how to combine security validation with daily security operations, which is also the most important driving force behind the birth of the 3.0 platform. Therefore, in the 3.0 platform, in addition to mitigation recommendations, SecVision has added SecVision recommendations and actionable protection policy recommendations, and added threat information displays for each validation action. The new continuous validation comparison feature also helps enterprises monitor whether their security defense capabilities have positive or negative shifts over time.

▍Faster and More Suitable for SMEs: SecVision Security Metric Validation Platform SaaS Version

Another product released concurrently at this product launch is the SaaS version of the SecVision Security Metric Validation Platform. The SaaS version has lower usage costs, is easier to deploy, and is the optimal choice for small and medium-sized enterprises.

Based on the existing SecVision Security Metric Validation Platform, a multi-tenant mode has been introduced to achieve the isolation of user data, and multiple technical mechanisms are used to secure the platform and user data.

The main difference from the on-premise architecture lies in the three newly added gateways, which are the proxy gateway, log gateway, and sandbox gateway. The proxy gateway provides both forward and reverse proxy modes to solve the inbound and outbound network issues of registration and attack traffic between bots in different location areas; the log gateway is used to collect and filter logs, and send them to the platform after encryption and compression; the sandbox gateway replaces the originally protected sandbox and supports the deployment of multiple bots inside a single sandbox gateway to execute destructive validation actions. Enterprises can choose to deploy and install one or more types based on the actual situation of the three gateways.

With the introduction of the three gateways, the implementation time of the SaaS platform will be reduced by 90%, and the resource overhead will be reduced by 50%. Compared with the on-premise version, the SaaS version is more suitable for users who have already migrated to the cloud. Therefore, more SME users can also easily experience the simplicity and convenience brought by security validation in security construction and daily operations, and can realistically enhance their security capabilities.

Considering users' concerns about data security, SecVision has adopted multiple security measures on the SaaS platform, including independent deployment of instances, two-factor authentication, encryption of security product logs, data retention and deletion mechanisms, and high availability of the platform.

At the launch, SecVision also demonstrated the newly released platform, comprehensively showcasing the platform's functional iteration and evolution, allowing users to experience the comprehensive features and convenient operation of the SecVision Security Metric Validation Platform in the most intuitive way.

▍Focusing on Global Hacker Group Trends, the Attack Library Achieves a Milestone Leap

SecVision Security Labs focuses on monitoring the activities of global hacker groups, and deeply analysing and tracing their attack behaviours. The lab has actively collected and compiled a knowledge base of attack behaviours containing major global APT groups and ransomware gangs, covering various stages of cyber attacks and multiple types of attack techniques. Through the SecVision Security Metric Validation Platform, users will be able to perform automated security validation, testing and evaluating their own security defense systems using various types of attack techniques in each stage of a cyber attack.

During the product updates and iterations over the past year, SecVision Security Labs has also continuously replenished and upgraded the attack library. The total number of simulated attacks in the SecVision attack library has exceeded 9,000, validation scenarios have surpassed 1,000, tracked threat groups exceed 200, ransomware gangs exceed 70, and more than 1,000 detection actions have been created for the newly introduced detection bots.

▍Free Trial Programme: Free Use for Up to 12 Months

The free trial of the SecVision Security Metric Validation Platform SaaS version was an important piece of news announced at the end of the launch. Considering the urgency of security construction and practical issues such as approval and procurement processes, the trial programme launched by SecVision allows interested users to quickly start experiencing the product. SecVision provides 2 validation bots and free usage rights for up to 12 months. Users only need to register through the SecVision official website www.secvision.cn or by following the official WeChat public account and replying with "Trial" to experience the user interface and rich features of the latest version of SecVision's security validation product, and more clearly understand and measure the effectiveness of their own security defense system.

For more exciting content about the launch, please follow the video channel [SecVision] to watch the launch replay as well as the pure version of the product release and product demonstration content.