How does Quick Heal provide complete protection?

Posted On: 23 Feb 2023

Quick Heal products are designed to provide multi-layered security that is powered by GoDeep.AI technology. The advanced technology helps counter the risk posed by known-bad as well as unknown & new attacks.

1. First Line of Defense (blocking known-bad content): Firewall, IPS, Web Protection & Email Protection

Firewall: It helps restrict unwanted traffic coming through unwanted ports & applications.

Web Protection: Helps restrict communication to known bad (malicious) URLs and websites.

Email Protection: Helps identify malicious email attachments before users download or open them.

HIPS: Intrusion detection and prevention systems help in blocking/limiting network-based attacks that exploit network layer vulnerabilities in OS & applications.

i) For example, the infamous WannaCry Ransomware exploits a vulnerability in Windows SMB protocol, and IPS Layer can detect such attacks.

ii) Attacks like Denial of Service, Cross Site Scripting, SQL Injection, Deserialization, etc., can be mitigated only through IPS.

2. Second Line of Defense (blocking known-bad content): Realtime-Protection, On-disk file-based detections

This helps in cases where the malicious files arrive on an endpoint through the internet or other means like removable USB drives etc.

The use of heuristics & machine learning augments the potency of this layer of protection.

3. Third Line of Defense (blocking the unknown – based on malicious behavior or attributes)

Heuristic Detections based on malware attributes (like file name, path, file attributes, digital certificate, etc.). This helps in identifying unknown, zero-day malware proactively.

Cloud-based and machine-learning-based detections

Behavior-based detection: Anti-Ransomware and behavior-based detection systems.