Are you Cyber Secure?

The revolutionary Check Point IoT Protect Nano Agent provides runtime Protection for IP-connected CCTV systems, enabling Provision-ISR devices with built-in firmware security.

Implementing the ‘Quantum IoT Protect Nano Agent’ protection component in CCTV devices prevents hackers from taking control, adding malicious code, running remote code (RCE), or disrupting the device’s normal operation.

The Nano Agent is based on real-time anomaly detection and is not a signature-based solution. The component activates advanced protection mechanisms at the operating system and application levels and uses several innovative means, among others worthy of mention:

• Anti-Shell Injection – monitoring shell commands executed by protected processes and their analysis to detect malicious code or command insertion attempts.
• File Monitor – monitors the file system and prevents the possibility of adding or writing over existing files.
• Import-Table Protection – monitoring API calls made through the import table to prevent exploitation of the function pointers from inserting an error code.
• Control-Flow Integrity (CFI) – as the software runs, it “paces” on the command run path. This protection agent pre-maps all the branching paths of the software run and functions. During the run, the mechanism verifies that there is no deviation from the legal flow. Attempting to run malicious code will inevitably lead to deviation, which will be detected and stopped immediately.
• Dynamic-Memory Protection – monitoring memory allocations and usage so that each dynamic memory allocation is checked and malicious code cannot use the volatile memory.