| COMPANY PROFILE

CMC Corporation is the second largest ICT corporation in Vietnam with more than 28 years of establishment and development. CMC has affirmed its position in the market of Vietnam and many countries around the world through its core business activities in 3 areas: Technology & Solution, Global Business and Telecommunications. In Vietnam, CMC is well known as a reliable partner in medium and large ICT projects in the fields of Government, Education, Tax, Treasury, Customs, Insurance, Electricity, Banking, Finance and Enterprises. CMC set its ambition to become a billion-dollar company by 2025.

CMC has the strategy to continue investments and development in the key ICT business sectors and expand business to European, American and Japan markets to become the leading ICT groups with competitive capacity in the regional and international markets.

CMC Corporation constantly strives to become the region’s leading ICT company by means of continuous creativity and innovation in research, application of high-tech solutions and principle of always heading towards the professionalism and perfection in products and services, in order to make Vietnam become a powerful nation on IT.

| PRODUCT & SOLUTION INTRODUCTION

1. SOC
The SOC is defined as a network security center that monitors, detects, quarantines, handles incidents and is responsible for security levels. safety of the entire organization’s information system with surveillance frequency, operating 24/7.
Components Of CMC SOC
– Human: CMC SOC brings together leading experts in the field of information security with nearly 10 years of experience in practical rescue and troubleshooting
– Technology: CMC SOC’s monitoring tools, analysis systems, and security devices are based on automation and artificial intelligence to monitor, analyze attacks, automate how to respond. Isolate and report the slightest abnormal signs targeting the data system.
– Procedure: Operating procedures, reporting – troubleshooting processes and digital investigation procedures comply with information security policies strictly applied in accordance with international standards ISO 27035: 2009 and ISO 27001.
All technology solutions used in monitoring, detecting, analyzing, warning and archiving at CMC SOC network security management center are staffed by CMC SOC network security management center. develop and master
2. Centralized anti-malware and administration (CMDD) solution CMDD
– Security solutions for businesses, integrated with AI artificial intelligence to help quickly detect and prevent all types of malicious code; easy to centralized and extended administration; establish your own ANAT policy.
– Internationally certified VB100 – One of the 3 most prestigious certificates in the world for quality of detecting and destroying malicious code.
Centralized monitoring system: Centralized administration on the dashboard interface, providing a panoramic view of the information security status of each computer in the system
Effectively prevent malicious code: Different from the traditional method of detecting malicious code based on signatures, CMDD uses an algorithm based on behavioral analysis mechanism, integrating AI and Machine Learning to improve detection and prevention efficiency, including malicious codes. have never been discovered before.
Large identification database: With over 10 million virus / malware samples and updated over 1000 new patterns every day
Intrusion Prevention System (IPS): Intrusion prevention system prevents the risk of exploiting vulnerabilities with systems that have not been updated with operating system patches
Policy setting: Set up an information security policy for the system including Internet usage policy, USB prohibition or monitoring policy, and software installation policy
Meet the technical standards of the Ministry of Information and Communications.
3. Website firewall protection (CWAF)
Specialized security solution for website applications, integrated with AI artificial intelligence to help businesses quickly detect and protect against threats and zero day vulnerabilities.
There is an accompanying service system to support customers in operating and handling problems.
– Application protection
CMC WAF protects the website against OWASP’s top 10 threats including Cross-Site Scripting (XSS) and SQL Injection.
Application-layer DOS attack (layer 7): All incoming traffic is statistically continuous and if it exceeds the threshold – a sign of a DOS attack – all traffic will be checked for Verify it comes from humans.
Protect your website against application-layer DDoS attacks (layer 7): All incoming traffic is continuously statistics and if it exceeds the threshold will be checked to verify it is coming from humans.
Protect your website against application-layer DDoS attacks (layer 7): All incoming traffic is continuously statistics and if it exceeds the threshold will be checked to verify it is coming from humans.
HTTPS / SSL via WAF: Secure security of data transfer between administrators and users, using WAF SSL certificates (SSL Certificates).
– Real time Monitoring & Analysis: CMC WAF provides real-time insights on web traffic and security events
– Detect abnormal behavior using AI: Improve the ability to detect new threats and zero-day vulnerabilities by leveraging topic modeling technology supported by CMC SOC AI to detect abnormal application requirements and determine if they are a threat or not.