Preventing Cyber Threats Without Detection
OPSWAT Deep CDR is an advanced threat prevention technology that doesn’t rely on detection. Instead, it assumes all files are malicious and cleans and rebuilds each file to ensure full usability with safe content.
OPSWAT technology is a cybersecurity solution that has initiated technological change in the current market and become a leader in CDR technology. It differs from other solutions with its archive processing depth, file refresh accuracy, and broad support for valid file types (currently over 90 different file types).
The technology is highly effective in preventing known and unknown threats, including zero-day targeted attacks, completely undetectable malware, VMware detection and concealment, and other malware evasion technologies.
How does Deep CDR work?
Identifying and Scanning Files
Files are evaluated and verified as they enter the disinfection system to ensure file type and consistency among over 4,500 file types. Each file is scanned to identify all scrambled active content within the file, such as macros, hyperlinks, and OLE objects. File extensions are examined to prevent seemingly complex files from appearing as simpler files, and are red-flagged for malicious content, alerting organizations during an attack. Our solution supports disinfection for over 90 common file types, including PDF, Microsoft Office files, HTML, and many image files. JTD and HWP files are also supported.
Sanitize the files.
Files are quickly and securely rebuilt. File elements are broken down into discrete components, malicious elements are removed, and metadata and all file properties are recreated. The new files are recompiled, renamed, and delivered, allowing users to safely utilize the file without loss of usability.
Use the files
The newly created files are now available. Even complex files are usable; for example, animations embedded in PowerPoint files remain intact after Deep CDR. Finally, the original files are quarantined for backup and further review. Our advanced Deep CDR engine protects organizations against the most advanced threats while preserving user productivity by creating fully usable files with secure content.
“As malware sandbox evasion techniques evolve, the use of CDRs in email gateways as an addition to, or alternative to, sandbox protection will increase.”
GARTNER
Why do you need Deep CDR?
Traditional Defenses Are Becoming Less Effective
Malware is becoming increasingly sophisticated and more successful at evading anti-malware engines and sandbox technology.
- Malware is becoming increasingly sophisticated and often exploits both known and unknown software vulnerabilities.
- Malware is now being created with “sandbox awareness,” increasingly evading traditional detection methods.
- The number of file types is increasing every day, revealing new potential vulnerabilities that malicious actors can exploit.
- The increasing complexity of the files provides cybercriminals with more opportunities to embed malicious scripts and exploits.
Anti-malware and sandbox solutions rely on detection.
While anti-malware applications and sandboxes can detect and block most threats, no solution can catch 100% of them. The problem with traditional anti-malware and sandbox technologies is that they rely on detection. While this is effective in many cases, cybercriminals are constantly developing new defenses to evade detection, allowing them to circumvent traditional defenses. To make matters worse, many file types that pose a high threat risk (such as Microsoft Office and PDF files) are essential for business productivity. How can organizations protect themselves against these threats without impacting productivity?
Deep CDR prevents threats without relying on detection.
Instead of relying on detection, Deep CDR eliminates threat detection errors and prevents many file-based threats, including known, unknown, complex, and sandbox-aware threats. By sanitizing each file and eliminating potential embedded threats, Deep CDR effectively ‘disarms’ all file-based threats without needing to detect them.
OPSWAT’s Deep Content Disarming and Reconstruction Prevents Threats Without Loss of Productivity.
Our Deep CDR technology doesn’t compromise productivity file features like PowerPoint animations and Excel macros; this allows users to continue using important files without the risk of virus infection, while maintaining user productivity. Most users won’t even be aware that Deep CDR has been created.