Public Relations

Next Generation Endpoint Malware Solution
“DEEP INSTINCT” Detects Ransomware not Detected by Other Antivirus Products

March 25, 2020
Asgent, Inc.
(JASDAQ: 4288)

  Asgent, Inc. (JASDAQ: 4288, President & CEO: Takahiro Sugimoto, located in Chuo-ku, Tokyo) announces that the next generation endpoint solution “DEEP INSTINCT” (Developer: DEEP INSTINCT, Ltd., CEO: Guy Caspi, located in Israel) distributed by Asgent detected a ransomware that was not detected by signature-based antivirus products.

[Detection of .WECANHELP Malware]
  There have been security breaches where the ransomware .WECANHELP^* infected system design and development companies performing development of various business applications for corporations including manufacturing, medical and finance. The same companies had signature-based antivirus products installed but they were not able to detect the ransomware, or grasp the overall effect on the corporate system as a whole, leading them to search for a product that was able to detect it.
  The cyber-security business division of SOMPO RISK MANAGEMENT Inc., which proposed DEEP INSTINCT to the same companies, made the following comment regarding the process and timeline background.
“We were consulted a customer who had been infected by the ransomware, and were looking to implement a product that could more effectively detect malware. We proposed DEEP INSTINCT, which can detect both known and unknown malware, and started a Proof of Concept (PoC). Having scanned approximately 500 million files, 433 malware were found. Of course, .WECANHELP was included in those. Also, detection rate is not just the most important thing to consider when implementing a malware detection solution, as over-detection and misdetection can be issues. Only 66 files were over-detected, making an over-detection rate of 0.0000001％. The customer was very satisfied with the results, and decided to install company wide.”

[DEEP INSTINCT]
  DEEP INSTINCT is a next generation endpoint protection (NGEPP) solution that detects and prevents threats before damage occurs through deep learning using neural networks. Millions of various malware file types are repeatedly learnt by deep learning, enabling real-time detection and blocking of various malware file types, whether they are known or unknown, before they are executed on the endpoint. Accuracy is improved dramatically by adopting deep learning as the learning algorithm, minimizing incidents of false detection that had been an issue with previous next generation endpoint products. Also, in addition to individual use of the DEEP INSTICT management module, it is possible to coexist with traditional endpoint products (signature-based) without functional conflicts. This enables multi-layer protection to be achieved on the endpoint.
  DEEP INSTINCT’s technology is widely recognized overseas, having won multiple awards including the Frost & Sullivan “2017 Technology Innovation Awards”, “NVIDIA 2017 Inception Awards” at the nVIDIA GPU Technology Conference (nVIDIA is well known for its deep learning processors) and the Cyber Defense Magazine “Infosec Awards Winners 2017 - Hot Company - Anti-Malware” award.

[Collaboration between SOMPO RISK MANAGEMENT and Asgent]
  SOMPO RISK MANAGEMENT joined the cyber-security business market in January 2018 with the group management philosophy of “Contributing to society through providing the highest quality services that contribute to customers’ piece of mind, safety and wellbeing”. Asgent works with SOMPO RISK MANAGEMENT as a partner company to provide security solutions such as DEEP INSTINCT as well as sales and technical collaboration.
  Regarding sales to the customer in question, Asgent Business Promotion Division Head, Tsutomu Takahisa, made the following comment. “We are very happy to be able to have provided DEEP INSTINCT, through SOMPO RISK MANAGEMENT, as a future protective measure for customers who have been victims of ransomware. Also, we will continue to provide superior security solutions to customers in the future, in collaboration with SOMPO RISK MANAGEMENT.”
  Both companies will continue proposing DEEP INSTINCT to customers in the future, to enable them to maintain secured IT systems.

[About DEEP INSTINCT]
Main characteristics:
・Detection and protection from known and unknown malware, using deep learning
・Detection of malware regardless if online or offline
・Identification of files with embedded macros and determination of safety of the files
・Support for various files included executables, PDF, Office files, compressed files, scripts etc.
・Coexistence with existing antivirus products (multi-layer protection)
・Whitelisting and blacklisting based on hash values and certificates
・Integration with Microsoft OMS enables unified management of D-Client logs
・Light and fast scanning

Supported endpoint OS:
Windows 7 SP1、8、8.1、10
Windows Server 2008 R2、2012、2012 R2、2016
macOS Sierra (Ver. 10.12), High Sierra (Ver. 10.13), Mojave (Ver. 10.14)
Android 4.4 and above

*Company and product names are the trademarks or registered trademark of the respective companies.