SilentDefense DoS features a detection engine designed for detecting the recent L7 DoS (payload-based), which exploit the targeted protocol/application to generate slow connections (and replies) rather than hundred thousands of bogus connection attempts. Typical detected threats include:
- • Slowloris
- • Slow POST
- • Apache Killer
SilentDefense ICS is designed to monitor and detect attacks against Industrial Control Systems (such as SCADA systems), and to protect critical infrastructures from the high-impact 0-day and targeted attacks, which may exploit protocols such as:
- • OPC
- • Modbus
- • MMS
- • IEC 60870-5-101/104
- • DCERPC
SilentDefense LAN has been designed to monitor local area networks. It is a behavioral-based engine that (passively) collects information about the active hosts, the network protocols they use and the communication patterns. The typical threats that SilentDefense LAN detects are:
- • Botnets
- • Malware infections, specifically when spreading by exploiting network services
SilentDefense Web, a detection engine for the HTTP protocol, can detect not only the common OWASP TOP 10 attacks against web applications, but also more advanced attacks like:
- • Phishing
- • Man-in-the-Browser