Malware detection/analysis/blocking using association analysis and machine learning

Maestro Networks, an in-house venture of Insec Security, announced that it has launched 'Maestro Cyber Threat Intelligence Platforms (hereinafter Maestro),' an intelligent security intelligence platform that automatically analyzes, verifies, and blocks the maliciousness of various files entering a company, and is embarking on full-scale business targeting customers in the public and enterprise markets.

Maestro Networks, in which Insec Security invests and handles joint technology research and marketing, is a company that develops security solutions for malware detection, analysis, and blocking.

Kim Jong-kwang, CEO of Insec Security, stated, “To prevent and respond to increasingly sophisticated cyber attacks, it is necessary to identify the characteristics and techniques of attackers in advance.” "A cyber security threat intelligence platform is required to identify information on these attack characteristics and techniques in advance," he said. "While companies have already deployed and are using many security products, they operate independently, failing to properly secure intelligence on incoming security threats, which only increases complexity and management burdens. Maestro is an intelligence security platform that centrally connects various security solutions to automatically identify security threats at the stage where files enter the corporate network, supporting rapid preemptive responses."

Maestro is an integrated intelligent security intelligence platform capable of detecting, analyzing, and blocking malware by utilizing multi-antivirus scanning, static analysis, dynamic behavioral analysis, IP/Domain/URL analysis, and email analysis for files entering the enterprise, as well as correlation analysis and machine learning analysis. It is specialized to integrate with various in-house endpoint, network, email, and web security solutions to rapidly identify threats—such as the latest ransomware, Advanced Persistent Threat (APT) attack codes, and malware—and execute corresponding countermeasures.

Maestro interoperates with various security solutions, such as network security systems, email security gateways, web accelerators/web proxies, endpoint security systems, WEB/WAS/DB/file servers/storage, and network segmentation/network interconnection systems. By configuring these diverse solutions into a single integrated platform, it can eliminate threat blind spots that existed when numerous security solutions were not organically integrated and operated within a company. Maestro supports interoperability with network and endpoint security solutions such as Symantec (including Blue Coat), Cisco, AhnLab, F5 Networks, Carbon Black, FireEye, and Palo Alto Networks during the file inflow stage, and with Opswat MetaDefender, Joe Security, and DomainTools during the file verification stage.

Furthermore, Maestro can enhance system operational efficiency by automatically detecting and blocking malware in files entering internal corporate network systems, thereby eliminating the need for manual threat analysis and verification. Based on an integrated management interface, Maestro displays the status of corporate network security solution integrations via a visual solution map and provides an integrated dashboard and reports that allow for a comprehensive overview of threat analysis results and status, such as malicious files entering the company.

Kim Jong-kwang, CEO of Insec Security, stated, “We believe we can create new business opportunities by combining our proprietary Maestro security solution, developed for proactive response to security threats, with Insec Security’s capabilities, including our extensive customer base, channels, and technological expertise.” He added, “In particular, we are doing our utmost not only to supply products but also to provide high-quality expert training staffed by professional instructors to foster security professionals.”