Innovative Practices Based on the BAS Track—ISC 2022 Digital Security Technology Innovation Forum

With its innovative attacker perspective and security validation technology, SecOps Validation stood out, earning a spot on the Top 100 Innovative Capabilities list in the security operations domain, and was simultaneously selected for the new Digital Security Panorama.

Wang Jingpu, CTO of SecOps Validation, was also invited to share SecOps Validation's innovative practices in the BAS track during this Innovative Technology Forum. He explained to industry experts, security leaders, and vendor representatives how SecOps Validation is leading the development of security validation on the BAS track, and shared SecOps Validation's practical cases in the financial sector.

By discovering weaknesses in defense systems through an attacker's perspective and methods, SecOps Validation not only effectively addresses the pain points currently encountered by client companies in their security construction but also achieves the goals of "knowing the enemy" (knowing how hackers attack) and "knowing oneself" (knowing how well one defends).

The SecOps Security Metrics and Validation Platform simulates hacking techniques in an innovative, technical manner without using a target machine mode. The AI attack-defense robots achieve automatic traffic deformation and interactive responses through AI intelligent algorithms and models. The transmission tunnel method adaptively adjusts to the environment and chooses automatically, eliminating the need to update the attack library due to minor changes in hacker attacks.

SecOps Validation possesses the domestic industry's unique sandbox technology, which can safely execute destructive attacks. It can fully simulate attacks at all stages of the Kill Chain while ensuring zero damage to business operations. The attack library, focused primarily on APT attack techniques, is updated in real-time to continuously validate the effectiveness of clients' existing security defenses. It highlights defenders' weaknesses through the attacker's perspective, such as the techniques, tactics, and Kill Chain in the ATT&CK framework, providing targeted recommendations to enhance security defense effectiveness.

The selection of this year's Top 100 Digital Security Innovative Capabilities was accompanied by the release of the "ISC 2022 Digital Security Innovation Case Report", which selected fifteen highly innovative, representative cases to help build a digital security defense line, strengthen the driving force of cybersecurity technological innovation, promote breakthroughs in key cybersecurity technologies, and provide effective guidance for the predictive analysis of the future development of digital security. SecOps Validation's security validation practices in the financial sector also stood out among numerous security practice cases and were successfully included in the case collection.

Click below to get the report

"ISC 2022 Digital Security Innovation Case Report"