Zero-Day Attack Prevention
Traditional attack detection relies on existing rules, while Zero-Day vulnerabilities are easy to bypass due to the lack of corresponding rules.
RASP detects attacks based on rule-free logical detection, capable of taking over and monitoring the underlying calls of applications. Since attacks will inevitably generate subsequent actions such as database access, command execution that cannot bypass underlying calls, RASP can effectively protect against both known attacks and unknown Zero-Day attacks.
Memory Shell Defense
Memory Shell attacks are extremely concealed and harmful, and effective defense can only be achieved through in-depth internal detection of applications.
Yulevo Sentry RASP provides three layers of protection barriers against Memory Shell attacks, intercepting layer by layer along the attack path of Memory Shells to achieve comprehensive protection against both attempted injection and injected situations.
Application Hot Patch
Aiming at the high costs, significant impact, and slow coordination of vulnerability repair, Yulevo Sentry RASP provides patch repair for running applications without restarting them, and updates corresponding repair capabilities in real time for newly erupted vulnerabilities, efficiently supporting emergency response to hot-spot vulnerabilities.
Weak Password Detection
Yulevo Sentry RASP monitors weak password logins through user's login behaviors, supports weak password detection for applications and middleware, and can set detection rules according to enterprise requirements.
It identifies weak passwords during the login process passively without active scanning, thus avoiding problems such as account locking, and can obtain plaintext for more accurate detection and comparison.
Data Link Monitoring
Yulevo Sentry RASP obtains complete call chains of applications, understands the data transmission chain of APIs, and thus achieve excellent code positioning effects in data tracking.
It presents the microservice topology in applications, thereby understanding service call relationships and discovering call risks. It also presents the access relationships between different applications and discovers abnormal access connections.
Component Inventory Detection
With frequent vulnerabilities in open-source components, the supply chain security of applications has attracted much attention.
Yulevo Sentry RASP monitors the actual calling situations of component libraries during application runtime, obtains versions of component libraries and analyzes existing risks, providing complete component library security governance and avoiding supply chain attacks.