Kaspersky- Anti Targeted Attack Platform

Cyber Security Model

KASPERSKY CYBER SECURITY ANTI TARGETED ATTACK PLATFORM

FEATURES

Full-Stack Threat Detection & Response
Combines endpoint detection, network detection (including IDS rules for both north-south & east-west traffic), sandboxing, threat hunting, digital forensics, and global threat intelligence in one unified platform.
Enhanced Visibility & Network Telemetry
Exports telemetry directly from endpoint agents; generates network maps and session tables; sees suspicious activity even in encrypted traffic via methods like ja3 and ja3s without full decryption.
Automated & Manual Response Flexibility
Supports both real-time automated workflows to contain threats, and manual investigative capability for forensics and custom response.
Endpoint & Perimeter Integration
Works with agents on endpoints, plus integrates with web/mail servers, proxies etc. to cover entry points.

SPECIFICATIONS

Platform Components: Central Node, Sensor, Sandbox, Endpoint Agent.
Supported OS for Endpoint Agents: Windows, Linux, macOS.
Browsers / UI Access: Chrome, Firefox, Edge, Safari on Windows, Linux, Mac. Minimum screen resolution 1366×768 for management UI.
Virtualization Support: VMware ESXi 6.7 / 7.0 for virtual deployment of components.
Detection Methods: IDS rules, ML / behavior-based, sandbox analysis, encrypted traffic methods

KASPERSKY CYBER SECURITY NEXT EDR OPTIMUM

FEATURES

Strong Endpoint Protection & Flexible Controls
Combines ML-based endpoint protection, automatic remediation, and enterprise-grade controls to reduce attack surface and protect against a variety of threats.
Essential EDR with Guided Response
Provides root-cause analysis tools, guided investigation and response workflows, and automated alerts to help IT teams act more quickly.
Cloud & On-Prem Deployment with Automation
Deployable in the cloud or on-premises; includes multiple automation features (patch management, hardening tasks) to reduce manual overhead.
Integrated Cloud Security Monitoring
Includes visibility into cloud services usage, blocking of unauthorized cloud apps, and monitoring sensitive data stored in cloud services.

SPECIFICATIONS

Supported OS (Endpoint Agent): Windows 7 SP1, Windows 8.1, Windows 10 (various versions, 32/64-bit), Windows Server versions.
Minimum Hardware Requirements (Endpoint Agent): Processor ~1.4 GHz (single core) or higher; RAM 256 MB (512 MB if using a 64-bit OS); free disk space ~500 MB.
Management Console Options: “Pro view” cloud-based console; “Expert view” (on-prem web console or via MMC in some cases) depending on license tier.
Feature Comparison to Other Editions: Includes all features of Foundations plus additional cloud security, improved controls, cybersecurity training, enhanced visibility & response.

KASPERSKY INDUSTRIAL CYBERSECURITY

FEATURES

Native OT-XDR for Industrial Environments
Provides extended detection and response tailored to operational technology (OT): including legacy equipment, distributed/isolated nodes, industrial networks, SCADA/DCS systems etc.
Comprehensive Asset & Network Visibility
Assets management, network traffic analysis (DPI), industrial payload extraction; network anomaly detection; mapping of industrial devices; visibility into network sessions and behavior.
Real-Time Industrial Process Monitoring
Monitors industrial commands, identifies deviations, supports integrity controls, audits security compliance, protects endpoints (both Windows & Linux) with minimal impact on OT processes.
Flexible Deployment & Integration
Has modules (“KICS for Nodes” for endpoints, “KICS for Networks” for network sensors) that can be deployed separately or together; integrates via APIs, Syslog, third-party systems; supports passive/active audits.

SPECIFICATIONS

Components:
• KICS for Networks (network traffic analysis, sensors)
• KICS for Nodes
Supported OS: Windows, Linux endpoints; also “network devices” / third-party connected devices; legacy OT systems.
Hardware Requirements for Server Functions: Intel Core i7, 32 GB RAM, ~750 GB disk + extra per monitoring point etc.
Sensor Node Requirements: (for network or endpoint sensors) lower spec: e.g. Intel Core i5/i7, 4 GB RAM + per monitoring point storage.
Software Requirements: e.g. CentOS 7.6.1810 for network components; matching OS versions for sensors; integrations via endpoints of particular agent versions.