UCDP
Unified Cyber Defense Platform
These are just some of the layers of protection that come with UCDP
PROTECTION LAYER #1
Perimeter Defence
Firewalls:
Filters incoming and outgoing network traffic based on an organization's previously established security policies.
Intrusion Detection Systems (IDS) / Intrusion Prevention Systems (IPS):
Monitors network traffic to identify and respond to suspicious activities.
PROTECTION LAYER #2
Endpoint Protection
Antivirus and Anti-malware:
Protect against malware, including viruses, worms, and ransomware.
Endpoint Detection and Response (EDR):
Provides real-time monitoring and response to threats on endpoints.
PROTECTION LAYER #3
Identity & Access Management (IAM)
Multi-Factor Authentication (MFA):
Requires multiple forms of verification to prove identity.
Privileged Access Management (PAM):
Controls and monitors administrative and privileged accounts.
PROTECTION LAYER #4
Data Security
Encryption:
Protects data at rest and in transit.
Data Loss Prevention (DLP):
Prevents sensitive data from leaving the organization.
PROTECTION LAYER #5
Network Security
Secure Sockets Layer (SSL)/Transport Layer Security (TLS) Encryption:
Protects data in transit over the internet.
Virtual Private Networks (VPN):
Creates a secure connection over the internet.
PROTECTION LAYER #6
Security Information & Event Management (SIEM)
Log Management:
Collects and analyzes log data from various sources.
Event Correlation:
Identifies and correlates related security events.
PROTECTION LAYER #7
Cloud Security
Cloud Access Security Brokers (CASB):
Provides visibility into cloud applications and services.
Secure Internet Gateway (SIG):
Offers a secure and direct path to the internet for cloud-based resources.
PROTECTION LAYER #8
Application Security
Web Application Firewalls (WAF):
Protects web applications by filtering and monitoring HTTP traffic.
Secure Coding Practices:
Ensures software is developed with security in mind.
PROTECTION LAYER #9
Operational Security (OpSec)
Security Awareness Training:
Educates employees on recognizing and responding to security threats.
Disaster Recovery and Business Continuity Planning:
Ensures operations can continue after a security incident.
PROTECTION LAYER #10
Advanced Threat Protection
Sandboxing:
Isolates suspicious programs for analysis
Threat Intelligence Platforms:
Analyzes and shares information about emerging threats.