Guardian Services Network (GSN)
The GSN is a signature-based Network Intrusion Detection System (IDS) that detects cyberrelated attacks against an enterprise. The events are then relayed to a Guardian Service Management Console.
Guardian Services Honeypot (GSHP)
The GSHP is a low-interaction honeypot that draws in attacks, such as botnets, to establish the types and magnitude of attacks on a system. The events are relayed to a Guardian Service Management Console. Multiple honeypots may be configured as a network of hosts, or honeynet.
The honeynet may be physical or virtual - a physical network with physical sacrificial hosts, a completely virtualized network and hosts, and anything in between.
Guardian Services Management Console (GSMC)
The GSMC is a robust server system that establishes encrypted communication channels to sensors distributed across an enterprise. The system has a webbased interface that allows security analysts to correlate data gathered from the sensors. Events are then filtered by a number of attributes including event type and source/ destination IP. Specific events can be stored and forwarded to a number of other GSMCs.
