Customers: All-Russia State Television and Radio Broadcasting Company (VGTRK)
Contractors: Positive Technologies Product: PT MultiScannerProject date: 2017/10 - 2018/03
|
On May 14, 2018 announced Positive Technologies implementation of PT MultiScanner for protection of corporate resources of VGTRK.
Based on a product convenient internal services were developed for complex anti-virus check of files of employees. Their creation allowed to cut by half labor costs of cybersecurity specialists of VGTRK on manual checks of suspicious objects, to increase security of infrastructure from the malware and awareness of personnel in questions of information security.
Initially for fight against the malware the department of data protection (DDP) of VGTRK used a set of antivirus tools. However without centralized control system of antiviruses it was difficult to organize effective interaction of all solutions.
"Our specialists faced a set of false operations and difficulties in the analysis of diverse reports on scanning. Also we got the special e-mail address where the staff of the company could send letters with suspicious contents. All messages were processed manually by specialists of OZI — this method of detection of the malware was effective, but demanded essential labor costs. — For counteraction to threats we needed at the same time effective and most flexible solution. The multi-layer system of protection against harmful content of PT MultiScanner became such solution". Safronov Dmitry, head of department of data protection of VGTRK
|
For detection of the malware PT MultiScanner uses several anti-virus engines, static analysis and reputation lists. These lists are delivered by specialists of Positive Technologies expert center who carry regularly out penetration tests and investigate incidents in the large companies of the different industries. Also there is a possibility of the retrospective analysis allowing to monitor distribution of the malware in infrastructure and to investigate the arising cybersecurity incidents.
Thanks to support of a set of interaction interfaces of PT MultiScanner it is easily integrated into infrastructure and allows to protect mail, web portals and file storages from cyberthreats, to reveal harmful activity in network and user web traffic and also to create on the basis of a product internal user services for verification of files.
In VGTRK based on PT MultiScanner two options of check of objects are implemented: using local user service and an e-mail client. Now employees can independently make check and instantly receive verdicts, loading files on internal service or sending them to the analysis through mail. It is important to note that PT MultiScanner is developed in the organization therefore files when scanning do not leave perimeter of the company.
"At detection of the malware specialists of OZI instantly receive notifications that helps them to take quickly necessary security measures, to monitor spread of infection in infrastructure and to liquidate threat. According to the results of the project it was succeeded to cut by half labor costs on manual checks and to solve a problem of effective antivirus protection. Besides, thanks to emergence of the user services we managed to involve in process of security of staff of VGTRK and to increase their awareness questions cybersecurity. In our further plans — expansion of set of anti-virus engines and integration with other corporate systems of VGTRK for providing a comprehensive protection". Krasavina Evgenia, head of department of promotion and development of the products Positive Technologies
|