Top Banner
Vasco da Gama (1460-1524) was a Portuguese explorer who discovered an ocean route from Portugal to the East . ” GamaSec (2009) discovered how to Explore Your Web Vulnerabilities A few lines of code can wreak more havoc than a bomb ”. Tom Ridge (Former) Secretary of the U.S. Department of Homeland Security
13

Gama sec presentation for hosting june12

Jan 16, 2015

Download

Documents

Avi Bartov

 
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Gama sec presentation for hosting june12

“Vasco da Gama (1460-1524) was a Portuguese explorer who discovered

an ocean route from Portugal to the East. ”

GamaSec (2009) discovered how to Explore Your Web Vulnerabilities

“A few lines of code can wreak more havoc than a bomb”.

Tom Ridge (Former) Secretary of the U.S. Department of Homeland Security

Page 2: Gama sec presentation for hosting june12

Explore Your Web Vulnerabilities

2

GamaSec website Scan for hosting

!Scan your Website today and find vulnerabilities before Hackers do

.Gamascan’s Web application scanner protects applications and servers from hackers It is an automated security service that searches for vulnerabilities within web.applications

.Gamascan’s vulnerability assessment scan provides real-time vital business solutions GamaScan identifies security web vulnerabilities and recommends optimally matched solutions. when you need them not when it's too late

GamaSec website Scan for hosting

Scan your Website today and find vulnerabilities before Hackers do!

Gamascan’s Web application scanner protects applications and servers from hackers. It is an automated security service that searches for vulnerabilities within web applications.

Gamascan’s vulnerability assessment scan provides real-time vital business solutions. GamaScan identifies security web vulnerabilities and recommends optimally matched solutions. when you need them not when it's too late

Page 3: Gama sec presentation for hosting june12

Vision : Explore Web Vulnerabilities

Explore Your Web Vulnerabilities

GamaSec provides Web Security Scan as a SaaS through the Cloud.

GamaScan is a remote online web vulnerability-assessment service delivered via SaaS (software-as-a-service) and is designed

to identify security weaknesses in web applications. as well as siteexposure risks.

Gamascan is an early-warning system of defence for web operation,applications, and online information suitable for organizations of anysize operating on the internet.

Corporate Mission

 To be a leading provider of web vulnerability assessment services and solutions which provide entities of various sizes, location, and vertical markets with a low-cost and easy to use method to identify, assess, and address the major threats facing their website and web

applications.3

Page 4: Gama sec presentation for hosting june12

In addition to the explicit costs resulting from security attacks, there are many implicit losses such as the lost future sales, negative media coverage, and negative market

reaction following a breach .

“Recent research shows that 75% of cyber attacks are done at web application level "

“These are just some of the web application breach events to make headlines in 2011. In just the first half of this year, the number of attacks on websites increased by 65 percent over 2010, and surpassed the total number of attacks tracked in all of 2009, according to

HP's “2011 Mid-year Top Cybersecurity Risks Report”.

Web applications are accessible 24 hours a day, 7 days a week and control valuable data such as customer information, transaction information and even proprietary corporate data.

The Need

“99% of network intrusions result from exploitation of known vulnerabilities or configuration errors where countermeasures were available ”.

Source: CERT, Carnegie Mellon University

Page 5: Gama sec presentation for hosting june12

Registration Start Scan

ScanningProcess

Analyzing WebsitesScan report

GamaSec management Panel

Explore Your Web Vulnerabilities

GamaSec Cloud Technology

GamaSec Report

Page 6: Gama sec presentation for hosting june12

GamaSec Cloud Computing

Explore Your Web Vulnerabilities

6

No software or Hardware to install or manage- There is no need to install anything on your system. Schedules your scans to suit your needs

Fully automated scans

Online friendly user dashboard and on demand scheduler, designed report has been efficiently in color-coded and graphical format to provide the flexibility necessary to satisfy all audiences ranging from upper management to system administrators.

Online friendly user dashboard and on demand scheduler, designed report has been efficiently in color-coded and graphical format to provide the flexibility necessary to satisfy all audiences ranging from upper management to systemadministrators.

Easy dashboard & reporting 

The new GamaSec portal Identifies major vulnerabilities: XSS, SQL injection, Cross Frame scripting, command execution, code injection and other web application vulnerabilities

Web application SaaS Scanner

Page 7: Gama sec presentation for hosting june12

GamaSec Cloud Technology

Explore Your Web Vulnerabilities

Web Application Scan via Cloud Computing

GamaSec provides Web security application scan as a service through the Cloud. While avoiding maintenance costs, licensing costs and the costs of the hardware required to run servers on-site.

GamaSec provides Web security application scan as a service through the Cloud. While avoiding maintenance costs, licensing costs and the costs of thehardware required to run servers on-site.

Update vulnerability protection

Vulnerabilities are updated on a daily basis from the GamaSec knowledge base, ensuring that you are always checked for the latest threats and vulnerabilities. Done by experts. If something happens in the security world - we are the first to know.

Vulnerabilities are updated on a daily basis from the GamaSec knowledge base, ensuring that you are always checked for the latest threats and vulnerabilities. Done by experts. If something happens in the security

world - we are the first to know.

Trusted Website Security Seal

Trusted Website Protection seal Increased customer confidence leads to increased revenue, give your customers the peace of mind of knowing that you are taking steps to help ensure their information will remain safe and confidential ,

Trusted Website Protection seal Increased customer confidence leads to increased revenue, give your customers the peace of mind of knowing that you are taking steps to help ensure their information will remain safe and

confidential ,

Page 8: Gama sec presentation for hosting june12

GamaSec Uniqueness

Explore Your Web Vulnerabilities

“What do I want to do in my business that’s different from everyone else”?

1.Deeper Vulnerability scan – a real answer to website threat exposure

2.Zero Days Vulnerabilities - In house research to be sure you are 100% shield

3.Expertise team, 15 years of IT security knowledge and experience, protecting you for tomorrow new website security challenges

4.Meaningful reports to management and technical teams clearly defines existing vulnerabilities, along with recommended solutions

5.Comprehensive Management dashboard and control panels puts you in the driver’s seat, human interface ,easy access, flexibility

6.We are taking care of your site security from the vulnerabilities discovery up to providing you recommendations and remedies

to fixed it .

.1Deeper Vulnerability scan – a real answer to website threat exposure

.2Zero Days Vulnerabilities - In house research to be sure you are 100% shield

.3 Expertise team, 15 years of IT security knowledge and experience, protecting you for tomorrow new website security challenges

.4 Meaningful reports to management and technical teams clearly defines existingvulnerabilities, along with recommended solutions

.5 ,Comprehensive Management dashboard and control panels puts you in the driver’s seathuman interface ,easy access, flexibility

.6We are taking care of your site security from the vulnerabilities discovery up to providing you recommendations and remedies

to fixed it .

Page 9: Gama sec presentation for hosting june12

Explore Your Web Vulnerabilities

Advantages to OEM’s

Branded Service: GamaScan provides OEMs with a value-added branded service that is indispensable to its customers on an ongoing basis and which continually keeps the OEMs name in front of its valuable installed base.

Revenue opportunity: OEMs can leverage the GamaScan functionality as a value added feature to drive incremental revenue from their existing installed base, all without the need to fund a massive internal R&D effort.

Software-As-A-Service: The Gamasec service is entirely cloud-based. Hence, there is no need for an up-front investment on the part of the OEM to purchase hardware, software or skilled network engineers. GamaSec does all the heavy lifting!

Enhanced competitiveness: GamaScan can provide OEMs with a strong competitive differentiator in an increasingly homogenized market.

GamaSec provides its OEMs with the maximum flexibility to configure the final product to their own unique needs.

Branded Service: GamaScan provides OEMs with a value-added branded service that is indispensable to its customers on an ongoing basis and which continually keeps the OEMs name in front of its valuable installed base.

Revenue opportunity: OEMs can leverage the GamaScan functionality as a value added feature to drive incremental revenue from their existing installed base, all without the need to fund a massive internal R&D effort.

Software-As-A-Service: The Gamasec service is entirely cloud-based. Hence, there is no need for an up-front investment on the part of the OEM to purchase hardware, software or skilled network engineers. GamaSec does all the heavy lifting!

Enhanced competitiveness: GamaScan can provide OEMs with a strong competitive differentiator in an increasingly homogenized market.

GamaSec provides its OEMs with the maximum flexibility to configure the final product to their own unique needs.

Page 10: Gama sec presentation for hosting june12

Explore Your Web Vulnerabilities

Strengths over competitive offerings?

 Accelerate repairs by ranking and prioritizing vulnerabilities

Ability to link the customer to validated remedies.

Provide dramatic operational cost savings for assessment and patch management.

Reduce human error by double-checking actions of security staff with unbiased, reliable external auditing.  

Online 24/7 technical tickets support, help you with the findings remedies tractability

3 Levels reporting view permission ( Admin, super User and end users)

White label reporting and white label portal

No need to purchase hardware, cloud computing SaaS solution

On demand scheduler to scan your website when you need it as per your needs

Scan customization for tailor made clients requests

No need for expensive and often cost-prohibitive IT security engineers

Comprehensive Management dashboard and control panels

Affordable and easy to deploy.

Ensure your clients higher quality applications that have passed rigorous security assessment and compliance checks before they are moved to production

Page 11: Gama sec presentation for hosting june12

Explore Your Web Vulnerabilities

Add your own company logo and customized look . Get the ultimate website scan protection and the ultimate in branding flexibility with GamaSec The best way to quickly improve your Web security with minimum resources and limited budget Increased Security, Increased Conversion

 

Why you ask? Because shoppers are more confident in using their credit cards online when they see the GamaSec security seal.

GamaSec Solution

Page 12: Gama sec presentation for hosting june12

10 Web Application Security Statistics You Can't Ignore

73%of organizations have been hacked at least once in the past two years through insecure Web applications .

State of Web Application Security Survey, Ponemon Institute

74% of IT practitioners believe Web application security is either more critical or equally critical to other security issues faced by their organizations .

State of Web Application Security Survey, Ponemon Institute

70%of threats are at the Web application layer. Gartner

55%of all disclosures were Web application vulnerabilities. IBM X-Force 2010 Mid-Year Trend and Risk Report

12Number of vulnerabilities per Web application. Web Application Security Consortium

13The average number of "serious" vulnerabilities on a website. WhiteHat Security

$525 The amount the average business spends per employee annually on security . Gartner

$3.8millionMedian annual cost of a cyber attack. The First Annual Cost of Cyber Crime Study, Ponemon Institute

80%of retailers and organizations that handle credit card transactions had been hit with a data breach . PCI DSS Compliance Report 2009, Ponemon Institute

$3.5millionThe average annual cost of achieving regulatory security compliance in multinational companies. The True Cost of Compliance, Ponemon Institute

Page 13: Gama sec presentation for hosting june12

Explore Your Web Vulnerabilities

Thank You!

13