WSS provides uninterrupted real-time web security service
We are ,as a specialized cyber security company, presenting best solutions for web server and cloud computing
Product Plans
© 2022 UMV Inc. All Rights Reserved.
Web Server & Cloud Security Solutions
WSS provides uninterrupted real-time web security service
We are ,as a specialized cyber security company, presenting best solutions for web server and cloud computing
Why WSS?
Why WSS?
The insufficiency of network security precautions against hackers, which are developing themselves day by day, unfortunately makes the security weak against their cyber attacks
Insufficient Network Security
Limitations of network defense due to the increase in continuously renewed web vulnerabilities
Information Security Incidents
Security Incidents didn't cause only by hackers also employees could cause incidents
Exception Processing Risk
Risks caused by encoding/encryption and security policy exceptions
Various Intrusion Methods
Inability to detect web shells installed on the system in different formats such as parsed, hidden, encoded and more
Detection of Malicious Scripts
Inability to detect inserted malicious scripts before or after setting up a WAF
Other Incidents
Network bypass vulnerability and overload on full scan
Web-based Attacks Are
Mostly Done by Web Shells
Mostly Done by Web Shells
Consistent use of web shells by Advanced Persistent Threat
(APT) has led to significant cyber incidents.
(APT) has led to significant cyber incidents.
What is a Web Shell?
-
Web Shell is a script that can be uploaded to a web server to enable remote administration of the machine
-
Web Shell can take control of the system, and insert ransomware or other malware
-
Web Shell can be installed on systems in various formats using different techniques by encoding or through an internal employee computer
-
Web Shell can destruct itself whenever and wherever it wants constantly commits information theft by hiding in your server
-
Web Shell once successfully uploaded can be used to leverage to issue commands remotely. These commands are available to add, delete, execute files, further executables, or scripts
Web shells are utilized for
-
To harvest and exfiltrate sensitive data and credentials
-
To upload malicious URL, malware, and forgery
-
To use as a relay point to issue commands to hosts inside the network without direct Internet access
-
To use as command-and-control infrastructure
Web-based Attacks Are
Mostly Done by Web Shells
Mostly Done by Web Shells
Consistent use of web shells by Advanced Persistent Threat
(APT) has led to significant cyber incidents
(APT) has led to significant cyber incidents
What is a Web Shell?
-
Web Shell is a script that can be uploaded to a web server to enable remote administration of the machine
-
Web Shell can take control of the system, and insert ransomware or other malware
-
Web Shell can be installed on systems in various formats using different techniques by encoding or through an internal employee computer
-
Web Shell can destruct itself whenever and wherever it wants constantly commits information theft by hiding in your server
-
Web Shell once successfully uploaded can be used to leverage to issue commands remotely. These commands are available to add, delete, execute files, further executables, or scripts
Web shells are utilized for,
-
To harvest and exfiltrate sensitive data and credentials
-
To upload malicious URL, malware, and forgery
-
To use as a relay point to issue commands to hosts inside the network without direct Internet access
-
To use as command-and-control infrastructure
WSS, COMPLETES WEB SERVER SECURITY AND PROVIDES COMPREHENSIVE PROTECTION
Real-time web server security and uninterrupted web service
WSS Web Attack Real Time Defending Method
WSS defends web servers against a wide variety of web attacks that capitalize on weak points such as web application vulnerabilities. It is a comprehensive web security solution that can effectively respond with real-time monitoring, detection and defense actions against ever-evolving web-based attacks such as APT attacks, ransomware, attacks using web shell uploads, and various website spoofing attacks. WSS is a solution to effectively detect and protect the web-based attacks
In addition, with WARSS, another security solution of UMV customized for websites, it can provide more secure customer services to institutions and businesses. It detects website defacement (home page forgery), source code forgery, content forgery (image, video) etc. with less labor and effort. After any detection it restores changed files to their original state in real time also at the same time it provides full data security without damage
Against Web Shells
Web Shell Upload Attack Detection, Quarantine, Notify, Report and Treatment
Protects Personal Information
Personal Information Detection in File/Document/Database and Reporting
Against Malicious URLs
Malicious URL Detection, Quarantine and Exception Management
Protects Source Files
Source File Change Detection and Recovery
Real Time Detection
Real Time Detection against all security breaches
Recovers Config File
Web server configuration file change detection, recovery and IP report of attacker
WSS Detection Method
To improve detection performance, unknown malicious codes are collected and detected through the code-only analysis engine – SCR Parser, produced by WSS.
WSS Detection Method
-
Malicious code collection to improve detection performance; -
Detection analysis agents applied to more than 30,000 units -
Pattern implementation and exception support are provided to minimize false positives
-
Support in mold customization according to the needs of the target system.
Pattern Detection
Detection of patterns stored in the DB by comparing them with patterns in intrusive files
Signature Detection
Known web shell detection by generating the signature of web Shells
Algorithm Detection
Detection by WSS own minimal parser to detect the parts that are difficult to detect with patterns such as Obfuscated JavaScript webshells
Hash Value Detection
Detection by saving web shells' hash value which is periodically updated and published by VirusTotal
Explore Our Products
Security booster solution for webservers, protecting information data and providing uninterrupted service
