The Profiler uses AI to detect and prevent web attacks, such as SQL injection (SQLia) and cross-site scripting (XSS). It uses machine learning to detect anomalies and classify attack data. By analysing web server traffic in real-time, the software detects and immediately determines the sophistication, capability and effectiveness of each attack. This information is translated into a risk score to prioritise incident response.
Cyberlytic’s patented classification approach is far more effective at assessing attacks than traditional signature-based security solutions and adapts to new or evolving threats without requiring manual intervention.
• Advanced threat detection: Unsupervised machine learning detects anomalies in web traffic, whilst supervised machine learning classifies attacks based on threat characteristics.
• Threat analysis, visibility and prioritisation: The Profiler only alerts when a pre-defined risk threshold is exceeded and provides details of malicious web activity.
• Simple deployment and zero maintenance: No rules or signatures means no additional demand on analysts to detect even the most sophisticated attacks.
The Profiler is easily deployed by installing a web server agent or by connecting to mirrored network traffic. Data is sent to the Profiler, which is hosted in Cyberlytic’s secure cloud. Accessed via an intuitive web portal or integrated with any Security Information and Event Management (SIEM) system, the Profiler works autonomously, requiring no human intervention.