Home Identification of information security incidents

Identification of information security incidents

The information security system is a structure for preventing unauthorized operations conducted with data, involving the detection of incidents.

Types of information security threats

The factors with conditions that negatively affect information security are called threats. One of the most useful parameters for classifying threats is to determine the focus of the threat on any aspect of security. Thus, there are the following main information security threats:

Confidentiality threats. Unauthorized access to classified information by an outsider.

Accessibility threats. Receiving access to elements of an information system is made more difficult or impossible.

Integrity threats. Gaining the ability to modify data by an outsider.

These threats are caused by human factors or hardware or software failures.

FS TI is a solution to detect information security system threats are through the provision of anonymized IP-addresses feed.

Want to know more?

Detection of internal and external threats to the information security system is performed by the implementation of the FS TI product.

FS TI is a unique software product that contains a feed of anonymized IP addresses in the TOR, PROXY & VPN categories, that were sold in the public space or DarkNet.

The product consists of selected streams of IP addresses data:

Anonymized IP addresses (collected data from VPNs, Proxy servers, and TORs);
ASN hosting data that is used frequently.

FS TI can be integrated into a cybersecurity intrusion detection and prevention system. The product allows you to identify anomalies in network traffic and application traffic. FS TI can be used as a stand-alone solution, as well as integrated into SIEM/SOAR and into other information security solutions.

The number of ways of unauthorized access to IS systems and, consequently, threats, is constantly increasing, so every entrepreneur should think about the security system and possible threats

Why does FS TI prevail over analogues

Topicality

The product database lists not only IOCs, i.e. IP addresses from which cyberattacks have already been carried out, but also IP addresses with a dubious reputation that could potentially be used for criminal activities. Daily issuance of more than 300,000 active IPs with a high probability of attacks, while the rest of the companies such information appears in 2-6 weeks.

Proactivity

FS TI allows users to perform in-depth traffic analysis, make decisions based on the data obtained and prevent possible incidents.

Integration

Users can download reports from FS TI in TXT, JSON formats. The product is integrated into SIEM, SOAR, Firewall systems, as well as into other security systems.

Related products and services

FS PHISHING

FS PHISHING includes:

• Integration within the corporate network.
FS PHISHING provides large companies that don’t want to transfer employee information to cloud solutions with full operational autonomy.
• Customized development of phishing pages according to your requirements.
Flexible configuration of the system to the company's resources to make phishing attacks more realistic.
• Development of writing texts based on the clients’ needs.
The product allows users to create universal phishing emails according to their requirements. The system does not limit the type of letters.
• Configuring the system for your mail server.
We integrate the product and set up the interaction with the corporate mail servers for maximum efficiency of the system.

More

FS OSINT LAB

WEB-solution that helps to verify employees and contractors on data from open and closed sources, as well as with Big Data FS Group

You get access to unique data, make it easier for employees of different departments, for example:

• Procurement specialists
• HR specialists
• Compliance specialists
• Lawyers
• Financiers

In addition, the advantage of OSINT LAB is a user-friendly interface that centrally collects and displays all requested data.

More

FS IRT

Package of services for investigation, analysis, and investigation of information security incidents

The basic package includes:
• consulting with experts
• investigation of the IS incident
• comprehensive forensic examination of digital evidence
• reports on individuals / legal entities from open and closed sources
• a monthly newsletter with information about vulnerabilities actively used by hackers and recommendations for increasing the level of protection
• penetration testing
• scanning web applications and resources

More

FS MNG

Software product for detecting compromised accounts of the organization in open and closed sources

Thanks to FS MNG you can:

• identify compromised accounts, including when compromising third party resources
• prevent data leakage
• protect against the use of compromised passwords
• be informed about the leaks before it is widely covered in the media

More

FS TI

A software product that contains a list of anonymized IP addresses in the TOR, PROXY & VPN categories sold in public and in DarkNet. Allows you to identify anomalies in network traffic, application traffic and can be used in various ways

• Proactive approach to TI collection
• More information for decision making
• Earlier provision of data and thus prevention of attack
• Compatibility with most vendors' solutions
• Complementarity with other feeds

More