Machine Learning Anti-Malware
Machine learning techniques use well-trained machine models and algorithms to predict and block advanced attacks. Bitdefender’s machine learning models use 40,000 static and dynamic features and are continuously trained on billions of clean and malicious file samples gathered from over 500 million endpoints globally. This dramatically improves the effectiveness of malware detection and minimizes false positives.
Process Inspector operates in zero-trust mode, continuously monitoring all processes running in the operating system. It hunts for suspicious activities or anomalous process behaviour, such as attempts to disguise the type of process, execute code in another process’s space (hijack process memory for privilege escalation), replicate, drop files, hide from process enumeration applications and more. It takes appropriate remediation actions, including process termination and undoing changes the process made. It is highly effective in detecting unknown advanced malware, including ransomware.
Exploit prevention technology protects the memory and vulnerable applications such as browsers, document readers, media files and runtime (ie. Flash, Java). Advanced mechanisms watch memory access routines to detect and block exploit techniques such as API caller verification, stack pivot, return-oriented-programming (ROP) and others. GravityZone’s technology is equipped to tackle advanced, evasive exploits that targeted attacks rely on to penetrate an infrastructure.
Endpoint Control and Hardening
Policy-based endpoint controls include the firewall, device control with USB scanning, and web content control with URL categorisation.
Anti-Phishing and Web Security Filtering
Web Security filtering enables real-time scanning of incoming web traffic, including SSL, http and https traffic, to prevent the download of malware to the endpoint. Anti-phishing protection automatically blocks phishing and fraudulent web pages.
Network Attack Defence
Get a new level of protection against attackers seeking to access the system by exploiting network vulnerabilities. It helps extending protected areas, now with network based security that blocks threats like Brute Force attacks, Password Stealers, Network Exploits, lateral movements before they can execute.
GravityZone Email Security (Add-On)
The ultimate multi-layered protection for your entire organization from known, unknown and emerging email security threats. Stop large-scale phishing, targeted attacks, CEO fraud and malware in their tracks. It is available as an add-on to GravityZone Business Security.
Full Disk Encryption (Add-On)
GravityZone-manages full disk encryption uses Windows BitLocker and Mac FileVault, taking advantage of the technology built into the operating systems. It is available as an add-on to GravityZone Business Security.
Patch Management (Add-On)
Unpatched systems leave organizations susceptible to malware incidents, outbreaks, and data breaches. GravityZone Patch Management helps you keep your OS and Applications up to date across the entire Windows install base – workstations, physical servers and virtual servers. It is available as an add-on to GravityZone Business Security.
Response and Containment
GravityZone offers the best clean-up technology on the market. It automatically blocks/contains threats, kills malicious processes and roll backs changes.
The solution is trained based on 1 trillion samples from over 500 million endpoints worldwide. Regardless of how much the malware or ransomware is modified, Bitdefender can accurately detect new ransomware patterns, in both pre-execution and run-time mode.
Largest Security Intelligence Cloud
With over 500 million machines protected, the Bitdefender Global Protective Network performs 11 billion queries per day and uses machine learning and event correlation to detect threats without slowing down users.
Automate Threat Remediation and Response
Once a threat is detected, GravityZone BS instantly neutralizes it through actions including process terminations, quarantine, removal and rollback of malicious changes. It shares threat information in real time with GPN, Bitdefender’s cloud-based threat intelligence service, to prevent similar attacks worldwide.
Endpoint Risk Analytics
The risk analytics engine continuously computes a risk score to easily sort and prioritize assets, which makes it easy for the admin to address the most urgent issues.