Samsung SDS has recognized the need to strengthen endpoint security as cyberattack techniques that bypass network boundary security are becoming more sophisticated. Therefore, the company is responding to the changing environment by analyzing IPs and URLs of the entire network to block routes, and by analyzing malicious files in sandbox through signature-based network security equipment operation. However, these measures proved to be less than ideal for responding to the latest fileless malware and ransomware attacks that bypass existing security devices, and hence a completely new solution was considered.
According to a Samsung SDS official, the company tested and verified various global Endpoint Detection and Response (EDR) solutions to strengthen endpoint security from these various network boundary bypass techniques, and decided to adopt SentinelOne EPP which showed the best performance among all solutions.