HOME > SOLUTION > AppGuard > AppGuard Server

“Is your Server safe?”
“Server security is different than PC protection”

ServerGuard

“Security solution dedicated to Servers”

“Server security is different than PC protection”

What you need to protect in a server is different than in a PC. There are cases where Anti Virus software used in PC are installed in Servers, however, in reality, it does not provide robust security. This is because what you want to protect in a server is different than a PC. In a PC, the user will read an email, surf the web, and execute applications used for business. In contrast, there are different types of servers ranging from database servers, IIS and Web servers, AD servers, SQL servers, etc. Protecting what matters depends on the types of servers you want to protect. You need a security solution that is dedicated to the type of server to provide complete safety. Adversaries also conducts their attack based on the types of servers.

Server Endpoint Security today

Today, there are mainly two types of security products for servers on the market, anti-virus and white list. The anti-virus type is a method that detects and removes malware features based on the pattern matching. This technique is often used for PC endpoint security. Server attacks are mostly attacks due to communication requests that do not use files, and detection by file scanning, which is adopted in the anti-virus type, is not effective.

As its name suggests, the whitelist type uses a list of applications and processes that do not need to be cautious. It allows whitelisted operation but restricts others. By registering to the list and specifying executable programs and processes, malicious programs and operations will not be performed. This method itself seems to be effective for server defense, but since registration is required for each application and process, the list must be managed each time whenever it is added or updated, resulting in a huge operational cost for maintenance.

AppGuard Server specializing in server security

In recent years, cyber attacks which target Windows file sharing services and SMB vulnerabilities are increasing. In addition, fileless malware that avoids the detection of security products is on the rise, and new measures are required to protect the server. AppGuard Server was developed based on a proven AppGuard technology that has been used for endpoint security for Windows PCs in US government agencies and enterprises for 20 years. Unique security policy blocks suspicious processes that is considered illegal in the design of the OS. The policy does not need to be whitelisted for each process, and the policy set in the parent process is automatically inherited by the child and grandchild processes to protect the system. Because it does not rely on past threat information such as signature files, it completely protects the server from zero-day attacks and unknown malware.

HOME