Module Introduction

SiCAP-SiCAP-Operation Control and Audit (OMA) from the multi-dimensional, fine-grained resource authorization mechanism, the whole process of operation recording and control, a full range of operation auditing to the whole operation process of video playback, to achieve the operation process of the " prevention beforehand, control during the incident, audit after the incident ", and support SSO single sign-on and a variety of operation tools, simplify operations and improve work efficiency at the same time, comprehensively solve the problem of operation security, and effectively improve the level of enterprise IT operation management.

Feature Introduction

• User Identity Unified Management

  Centralized account management and unified authentication; Multiple authentication methods, two-factor authentication, hybrid authentication; Provide role customization and single sign-on.
• Asset Information Unified management

  Automatic asset discovery and identification; Unified management of the whole life cycle of assets; Support for rich asset types and protocols.
• Multi-dimensional, Fine-grained Authority Control

  On-demand fine-grained authorization based on the principle of least privilege for authorization;Flexible access control policies; Dynamic authorization based on authorization lists; Temporary work order authorization; Privilege request lists and access limitations; Highly secure two-person collaboration and review;。
• Automated Management

  Automatic auditing of asset accounts; Automatic password change and automatic password verification for asset accounts; Account password security policy customization; Operation script batch automatic execution.
• Multiple Operation Methods

  Client-side Operation Clientless Operation Direct Connect Operation OP Operation
•  Conversational Operations Entire Process Control and Audit

  Operation process real-time control, real-time alarm, real-time blocking; Comprehensive fine-grained audit trail; Operation process session playback; Full process video and video playback; Flexible retrieval of audit records and multi-dimensional statistics; Intelligent audit assisted decision-making.
• Total Security Control

  Ability to detect and analyze account risks; User abnormal access behavior identification and control. Anti-bypass behavior auditing.

Module Introduction

SiCAP-Automated Operation adopts an engine-less model, based on rich script libraries, for different operation scenarios, through the construction and issuance of script tasks, batch script execution is carried out to simplify the daily operation; support for complex operation scenarios, visualization of the operation tasks are flexibly arranged, and automated on a regular basis, to meet the personalized automation scenarios demanded by customers from all industries, assisting the IT management staff in automating the execution of routine work, accelerating the efficiency of IT operation and reducing the problem of human operation, so as to increase the efficiency of the operation in the enterprise.

Feature Introduction

• Visual Script Library Management

  Provide rich scripts, including but not limited to shell, Python, go, batch processing and other common scripting languages. Can meet the needs of automated operation scripts for various scenarios of operating systems, network/security devices, middleware, databases, and applications.
• Security Hardening Self-tests Automation

  Provide check scripts that can meet the requirements of the bank's security baseline and management specifications and update them in a timely manner. Support flexible configuration and adjustment of security reinforcement templates Support regular and automatic security baseline checking, provide statistical information and generate reports on the checking results. Provide reinforcement self-check and repair suggestions for unsatisfactory items.
• Automated Task Execution

  Support for automating scripted tasks for one device or multiple devices without human intervention; Support for automated single or batch file distribution unattended.
• Rich Operation Scenario Support

  Provide automated configuration management scenarios, supporting regular automated collection of asset configurations, regular automated verification, and collection results can be synchronized to CMDB; Support regular security reinforcement self-test, built-in security baseline, flexible configuration and adjustment of reinforcement templates, providing detailed information on the implementation results and reinforcement self-test repair recommendations; Support for regular automated inspection of assets (built-in security baseline check scripts, equal protection level 2 and 3 check scripts).
• Automated Job

  Based on the rich operation script library and flexible visual job scheduling capability, it can standardize and process the daily and complex operations, reduce the workload of operations personnel, and lower the risk of human operation; through the manual triggering of the execution of the three scheduling modes of execution, timing execution and execution according to the cycle, it can satisfy the automation of the operations needs in different scenarios, and improve the efficiency of operations.

Module Introduction

SiCAP-Database Operation and Audit (DBA), dedicated to comprehensive data security, can effectively monitor database access and operation behavior, accurately grasp the operational status of the database system, support database operation management and operation auditing, built-in and customized rules flexibly achieve real-time blocking of overstepping, tampering and high-risk operations, and record and alert. Thus, it can realize the risk prevention of security events beforehand, real-time blocking during the event, and locating, analyzing and tracing the evidence after the event, so as to guarantee the database security and meet the compliance requirements such as equal protection and industry norms.

Feature Introduction

• Full Database Audit

  Through the prior policy planning, operation monitoring, after the session audit on the database operation of the whole process of all-round audit.。
• Fine-grained Audit

  By analyzing the SQL semantics of different databases, it extracts the relevant elements in SQL (users, operation types, tables, fields, views, indexes, procedures, functions, return results...); it can audit the content of the return results of operation statements; it can audit the database account, user name, application account, operation, time, source and destination, applications and tools, and other information (business-related information, reasons for exceptions).。
• Multi-tier Business Linkage Audit

  Three-tier architecture auditing: by correlating the access of the application layer and the access operation request of the database layer, it traces back to the original visitor of the application layer; business auditing: SiCAP analyzes the communication protocols, such as http, https, etc., between the front-end browsers and the WEB servers, and identifies the business operation behaviors.
• Audit Strategy Management

  Customize important events and risk events based on flexible combinations of logged-in users, source IP addresses, database objects (divided into database users, tables, and fields), operation times, SQL operation commands, the number of records returned or the number of rows affected, SQL execution results, and the length of SQL execution.。
• Security Alert and Reporting Statistics

  Trigger security alerts based on audit strategy for timely risk treatment; built-in rich and granular reports to meet compliance requirements such as equal protection and industry norms.
• Intelligent Audit-Free

  Automatically builds a rule base, simplifies user operations, reduces auditing of repetitive data, reduces audit content storage, and improves system performance.
• Database Operations Audit

  Real-time monitoring of user access to the database of various operations, high-risk operations can be real-time blocking and alarms, and through video playback to reproduce the original operation process.

Module Introduction

SiCAP-System Integrated Log Audit (SIEM) can provide comprehensive and diversified log collection, massive and diversified log paradigm, centralized storage and flexible retrieval, comprehensive intelligent and efficient analysis, rapid response to risk alerts, easy traceability and evidence, realizing the full life cycle management of logs and assisting maintenance personnel in monitoring logs in multiple dimensions, such as anterior (risk policy), intermediate (analyzing and tracing), and posterior (investigating and obtaining evidence). It monitors logs in multiple dimensions, helping administrators accurately find key events and data from massive log data, accurately locate network faults, identify security threats in advance, improve network performance, safeguard system security, and help enterprises meet the requirements of “The Cybersecurity Law” and Equal Protection 2.0 compliance.

Feature Introduction

• Log Capture and Management

  Rich log source support Automatic discovery and unified management of log sources Multiple log collection methods Multiple log paradigm, standardization Flexible and efficient log retrieval Convenient log forwarding configuration。
• Comprehensive Log Analysis and Risk Alerts

  Massive logs, intelligent clustering, the formation of rules knowledge base Flexible configuration of risk strategy, various warning methods and fast response. Based on a variety of machine learning algorithms to achieve in-depth intelligent analysis and risk prediction Flexible configuration of various alert methods, fast response, improve efficiency and reduce impact.。
• Easily Traceable and Traceable, Audit Compliant

  Provide rich and diversified visualized data analysis, easy traceability, and provide effective basis for tracing and evidence collection afterwards. Supports compliance and meets the requirements of “The Cybersecurity Law” and Equal Protection 2.0.。
• Total Solution

  Linkage monitoring, operation audit, automated operation modules, can provide log audit overall solution to achieve a comprehensive log source security control.。