Web 2.0 Security Risks. Are you protected?
This paper outlines these new threats and discusses the limited effectiveness of reactive legacy Web security solutions against those threats. The paper then outlines the new reputation based, proactive security paradigm that is necessary for securing Web 2.0 applications.
Javascript Disabled To use our site, you must enable JavaScript.
Published:
Feb 22, 2007
Type:
White Paper
Length:
9 pages
White Paper
www.securecomputing.com
In Today's Web 2.0 Environment, Proactive ®Secure Computing is a global Security Is Paramount. Are You Protected?leader in Enterprise Gateway Web Gateway Security: Protect. Enforce. Comply.Security solutions. Powered by our TTrustedSource technology, our award-winning portfolio of solutions help our customers create trusted environments inside and outside their organizations. Table of ContentsIntroductory Overview: Boundaries No Longer Physical, but Virtual...............................................2Inbound Security Threats...............................................................................................................2Outbound Threats..........................................................................................................................3Legacy Security Solutions Are an Incomplete Solution to Web 2.0 Security Threats.......................3Meeting Web 2.0 Security Threats Head on with Comprehensive Web Gateway Security..............4The Major Components of Web Gateway Security: What Is Required?...........................................5 Reputation-Based Web Filtering................................................................................................5 Proactive Behavioral Based Anti-Malware Protection.................................................................5 SSL Traffic Scanning..................................................................................................................6 Enterprise Reporting.................................................................................................................6The Webwasher Web Gateway Security Solution: Technology and Architecture.............................7An Award-Winning Web Gateway Solution....................................................................................9Summary .......................................................................................................................................9
Secure Computing CorporationCorporate Headquarters4810 Harwood RoadSan Jose, CA 95124 USATel +1.800.379.4944Tel +1.408.979.6100European HeadquartersBerkshire, UKTel +44.0.870.460.4766Asia/Pac HeadquartersWan Chai, Hong KongTel +852.2598.9280Japan HeadquartersTokyo, JapanTel +81.3.5339.6310
© 2007 Secure Computing Corporation. All Rights Reserved. WW-WGS-WP-Feb07vF. Secure Computing, SafeWord, Sidewinder, Sidewinder G2, Sidewinder G2 Firewall, SmartFilter, Type Enforcement, CipherTrust, IronMail, SofToken, Enterprise strong, MobilePass, G2 Firewall, PremierAccess, SecureSupport, SecureOS, Bess, CyberGuard, Total Stream Protection, Webwasher, Strikeback, and Web Inspector are trademarks of Secure Computing Corporation, registered in the U.S. Patent and Trademark Office and in other countries. G2 Enterprise Manager, SmartReporter, Security Reporter, Application Defenses, Central Management Control, RemoteAccess, IronIM, SecureWire, SnapGear, TrustedSource, On-Box, Securing connections between people, applications, and networks and Access Begins with Identity are trademarks of Secure Computing Corporation.Introductory Overview: Boundaries No Longer Physical, but VirtualThe Internet today is a different mechanism than it once was. Widely referred to as "Web 2.0," today's Internet is a place where the boundaries of the enterprise are no longer clear and this has had a ripple effect on network security. Applications are now enabled over the Internet and the use of corporate intranets and extranets are now critical www.securecomputing.com components of business. Indeed, organizations now build their businesses on Web infrastructures, and we've even seen the proliferation of completely "virtual" companies that have no physical headquarters at all. Today's business model includes inbound access for remote employees, partners, and customers. Internal employees also reach beyond the edge of the internal network to communicate and gather information across the Internet. This bi-directional aspect of IP-based application access creates significant security challenges for enterprises, however. Communication methods are both inbound and outbound, and so too, threats have also become both inbound and outbound in nature. The enterprise must be protected from malware (malicious software), regulatory compliance must be ensured, data leakage prevented, and employee productivity must be managed. These security issues exis... [download for more]
Browse Technology Topics
Application Integration ,
Analytical Applications ,
Business Intelligence ... more , Configuration Management , Database Development , Data Integration , Data Mining , Data Protection , Data Quality , Data Replication , Database Security , EDI , SOAP , Service Oriented Architecture , Web Service Management , Data Warehousing less Analog Communications ,
Digital Signal Processing ,
Electronic Design Automation ... more , System On A Chip , Electronic Test and Measurement , Embedded Design , Boards & Modules , Embedded Systems and Networking , Electromechanical & Mechanical , Optoelectonics & Displays , Packaging and Interconnects , Passive & Discrete Components , Power Sources & Conditioning Devices , Integrated Circuits and Semiconductors , Sensors & Actuators less Application Integration ,
Application Performance Management ... more , Best Practices , Business Activity Monitoring , Business Analytics , Business Integration , Business Intelligence , Business Management , Business Metrics , Business Process Automation , Business Process Management , Call Center Management , Call Center Software , Change Management , Corporate Governance , Customer Interaction Service , Customer Relationship Management , Customer Satisfaction , Customer Service , EBusiness , Enterprise Resource Planning , Enterprise Software , EProcurement , Extranets , Groupware Workflow , HIPAA Compliance , IP Faxing , IT Spending , Marketing Automation , Performance Testing , Product Lifecycle Management , Project Management , Return On Investment , Risk Management , Sales & Marketing Software , Sales Automation , Server Virtualization , Simulation Software , Supply Chain Management , System Management Software , Total Cost of Ownership , Video Conferencing , Voice Recognition , Voice Over IP , Workforce Management , Incentive Compensation , Spend Management , Manufacturing Execution Systems , International Computing less Human Resources Services ,
Payroll Software ,
Time and Attendance Software ... more , Workforce Management Software , Financial Management , Employee Monitoring Software , Employee Training Software , Recruiting Software/Services , Employee Performance Management , ELearning , Benefits Management , Expense Management less Collaboration ,
Collaborative Commerce ,
Contact Management ... more , Content Delivery , Content Integration , Content Management System , Corporate Portals , Customer Experience Management , Document Management , Information Management , Intranets , Messaging , Records Management , Search And Retrieval , Search Engines , Secure Content Management , SLA less Active Directory ,
Bandwidth Management ,
Convergence ,
Distributed Computing ... more , Ethernet Networking , Fibre Channel , Gigabit Networking , Governance , Grid Computing , Infrastructure , Internetworking Hardware , Interoperability , IP Networks , IP Telephony , Local Area Networking , Load Balancing , Migration , Monitoring , Network Architecture , Network Management , Network Performance , Network Performance Management , Network Provisioning , Network Security , OLAP , Optical Networking , Quality Of Service , Remote Access , Remote Network Management , Server Hardware , Servers , Small Business Networks , TCP/IP Protocol , Test And Measurement , Traffic Management , Tunneling , Utility Computing , VPN , Wide Area Networks , Green Computing , Cloud Computing , Power and Cooling , Data Center Design and Management , Colocation and Web Hosting less AS/400 ,
Domino ,
Linux ,
Microsoft Exchange ,
Oracle ,
PeopleSoft ... more , SAP , Siebel , Solaris , Tivoli , Unix , Web Sphere , Windows , Windows Server less Access Control ,
Anti Spam ,
Anti Spyware ,
Anti Virus ,
Application Security ... more , Auditing , Authentication , Biometrics , Business Continuity , Compliance , DDoS , Disaster Recovery , Email Security , Encryption , Firewalls , Hacker Detection , High Availability , Identity Management , Internet Security , Intrusion Detection , Intrusion Prevention , IPSec , Network Security Appliance , Password Management , Patch Management , Phishing , PKI , Policy Based Management , Security Management , Security Policies , Single Sign On , SSL , Secure Instant Messaging , Web Service Security , PCI Compliance , Vulnerability Management less .NET ,
C++ ,
Database Development ,
Java ,
Middleware ,
Open Source ... more , Software Outsourcing , Quality Assurance , Scripting , SOAP , Software Testing , Visual Basic , Web Development , Web Services , Web Service Security , XML less Backup And Recovery ,
Blade Servers ,
Clustering ,
IP Storage ... more , ISCSI , Network Attached Storage , RAID , Storage Area Networks , Storage Management , Storage Virtualization , Email Archiving , Data Deduplication less 802.11 ,
Bluetooth ,
CDMA ,
GPS ,
Mobile Computing ,
Mobile Data Systems ... more , Mobile Workers , PDA , RFID , Smart Phones , WiFi , Wireless Application Software , Wireless Communications , Wireless Hardware , Wireless Infrastructure , Wireless Messaging , Wireless Phones , Wireless Security , Wireless Service Providers , WLAN less