Presentation is loading. Please wait.

Presentation is loading. Please wait.

10/14/2015 Introducing Worry-Free SecureSite. Copyright 2007 - Trend Micro Inc. Agenda Problem –SQL injection –XSS Solution Market opportunity Target.

Published byMyron Poole Modified over 9 years ago

Similar presentations

Presentation on theme: "10/14/2015 Introducing Worry-Free SecureSite. Copyright 2007 - Trend Micro Inc. Agenda Problem –SQL injection –XSS Solution Market opportunity Target."— Presentation transcript:

1 10/14/2015 Introducing Worry-Free SecureSite

2 Copyright 2007 - Trend Micro Inc. Agenda Problem –SQL injection –XSS Solution Market opportunity Target customers Competitive Key Selling Points/Strategies

3 Copyright 2007 - Trend Micro Inc. The threat environment Complexity Crimeware Spyware Spam Mass Mailers Intelligent Botnets Web Threats Multi-Vector Multi-Component Web Polymorphic Rapid Variants Single Instance Single Target Regional Attacks Silent, Hidden Hard to Clean Botnet Enabled Information Stealing Vulnerabilities Worm/ Outbreaks

4 Copyright 2007 - Trend Micro Inc. How vulnerable are Web sites? Fifty per cent – one of every two – online retail sites have serious vulnerabilities 1 –SQL injection –XSS vulnerabilities More than 22,000 known xss vulnerabilities identified at named Web sites 2 –Only 5% fixed More than 40% of Web threat incidents involved legitimate sites unknowingly distributing malware 3 1)Trend Micro research 2008 2)www.xssed.com, April 2008 3)TrendLabs Blog

5 Copyright 2007 - Trend Micro Inc. What is SQL injection? Injecting a script into website’s SQL database via online form Injecting a script into SQL database via Web-based form –Can be prevented with field parameters –Proliferation of forms w/ distributed owners is challenge

6 Copyright 2007 - Trend Micro Inc. What is SQL Injection?

7 Copyright 2007 - Trend Micro Inc. What is XSS? XSS = cross–site scripting to inject malware into Web pages –Local –Non-persistent –Persistent Takes advantage of site-specific vulnerabilities Can be used to: –Hijack and redirect user’s session –Access user session cookie and impersonate end-user –Can bypass access controls such as same origin policy –Can be used to craft phishing attacks and browser exploits

8 Copyright 2007 - Trend Micro Inc. What is XSS?

9 Copyright 2007 - Trend Micro Inc. What is XSS?

10 Copyright 2007 - Trend Micro Inc. What is XSS?

11 Copyright 2007 - Trend Micro Inc. What is XSS?

12 Copyright 2007 - Trend Micro Inc. What is XSS?

13 Copyright 2007 - Trend Micro Inc. What is XSS?

14 Copyright 2007 - Trend Micro Inc. What is Worry-Free SecureSite? 1.Assess, validate and monitor web sites against vulnerabilities 2.SecureSite mark for validated sites 3.If necessary, remediation steps and documentation provided

15 Copyright 2007 - Trend Micro Inc. How is Worry-Free SecureSite different than competition? Provided by a widely known and trusted security vendor Channel partners have required experience to help remediate vulnerabilities Affordable pricing to drive volume adoption and partner service revenue –Mark priced affordably for smaller online retailers –Ongoing scanning priced affordably for larger websites

16 Copyright 2007 - Trend Micro Inc. Level the playing field for your online retail customers New service business –OnDemand web application vulnerability assessment –Remediation services –Ongoing vulnerability monitoring –PCI compliance Higher recurring revenue –Hosted solutions have up to 2x higher re-purchase rates than equivalent tradt’l software Worry-Free SecureSite Benefits to Channel Partners

17 Copyright 2007 - Trend Micro Inc. How is Worry-Free SecureSite available? Annual hosted subscription Licensed per domain scanned Free trials available –Try and buy –Enable OnDemand scanning and reports

18 Copyright 2007 - Trend Micro Inc. Why Trend Micro? Web Filtering Security-as- a-Service Web-based Centralized Management Network Access Control Email Reputation Services Gateway Virus Protection 2-Hour Virus Response SLA 19951996199719981999200020012002200320042005200620072008 LAN Server Virus Protection Server-based Email Virus Protection Threat Lifecycle Management Strategy Trend Micro and Cisco Integrated Gateway Content Security Botnet Identification Service Our #1 goal is to create value for our customers through continuous innovation Compliance Data Leak Prevention Web Threat Protection

19 Copyright 2007 - Trend Micro Inc. Why Trend Micro? More than 3.2 billion websites monitored on a daily basis

20 Copyright 2007 - Trend Micro Inc. Why Trend Micro? TrendLabs helps provide a worldwide platform for delivering timely threat intelligence, service, and support anytime, anywhere.

21 Copyright 2007 - Trend Micro Inc. Competition

22 Copyright 2007 - Trend Micro Inc. Competition

23 Copyright 2007 - Trend Micro Inc. Competition

Download ppt "10/14/2015 Introducing Worry-Free SecureSite. Copyright 2007 - Trend Micro Inc. Agenda Problem –SQL injection –XSS Solution Market opportunity Target."

Similar presentations

Worry-Free Business Security 7

Worry-Free Business Security 7
Araullo, Carlo Mari Chan, John Mark Dela Pena, Carmina Santillan, Jeane Pauline.

Araullo, Carlo Mari Chan, John Mark Dela Pena, Carmina Santillan, Jeane Pauline.
The Threat Landscape Jan 2013. 2013 Threat Report 2.

The Threat Landscape Jan Threat Report 2.
Security and Trust in E- Commerce. The E-commerce Security Environment: The Scope of the Problem  Overall size of cybercrime unclear; amount of losses.

Security and Trust in E- Commerce. The E-commerce Security Environment: The Scope of the Problem  Overall size of cybercrime unclear; amount of losses.
The development of Internet A cow was lost in Jan 14th 2003. If you know where it is, please contact with me. My QQ number is 87881405. QQ is one of the.

The development of Internet A cow was lost in Jan 14th If you know where it is, please contact with me. My QQ number is QQ is one of the.
Team Members: Brad Stancel,

Team Members: Brad Stancel,
Chapter 4 McGraw-Hill/Irwin Copyright © 2011 by The McGraw-Hill Companies, Inc. All rights reserved. Ethics and Information Security.

Chapter 4 McGraw-Hill/Irwin Copyright © 2011 by The McGraw-Hill Companies, Inc. All rights reserved. Ethics and Information Security.
1 Panda GateDefender Performa Your First Line of Defense Product Presentation Name 2008.

1 Panda GateDefender Performa Your First Line of Defense Product Presentation Name 2008.
Security Issues and Challenges in Cloud Computing

Security Issues and Challenges in Cloud Computing
Threat Overview: The Italian Job / HTML_IFRAME.CU June 18, 2007.

Threat Overview: The Italian Job / HTML_IFRAME.CU June 18, 2007.
Copyright 2011 Trend Micro Inc. Trend Micro Web Security- Overview.

Copyright 2011 Trend Micro Inc. Trend Micro Web Security- Overview.
LittleOrange Internet Security an Endpoint Security Appliance.

LittleOrange Internet Security an Endpoint Security Appliance.
Symantec Vision and Strategy for the Information-Centric Enterprise Muhamed Bavçiç Senior Technology Consultant SEE.

Symantec Vision and Strategy for the Information-Centric Enterprise Muhamed Bavçiç Senior Technology Consultant SEE.
Www.encase.com Mel Pless, Sr. Director, Solutions Consulting Guidance Software, Inc. Let’s Get Right To The Endpoint Leveraging Endpoint Data to Expose,

Mel Pless, Sr. Director, Solutions Consulting Guidance Software, Inc. Let’s Get Right To The Endpoint Leveraging Endpoint Data to Expose,
SiteLock Internet Security: Big Threats for Small Business.

SiteLock Internet Security: Big Threats for Small Business.
Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP.
Barracuda Spam & Virus Firewall. Introduction to the Barracuda Spam & Virus Firewall Complete email server protection –Spam Blocking (95+ percent) Extremely.

Barracuda Spam & Virus Firewall. Introduction to the Barracuda Spam & Virus Firewall Complete server protection –Spam Blocking (95+ percent) Extremely.
CAP6135: Malware and Software Vulnerability Analysis Examples of Term Projects Cliff Zou Spring 2012.

CAP6135: Malware and Software Vulnerability Analysis Examples of Term Projects Cliff Zou Spring 2012.
Forefront Security Exchange. Problem Meddelande system och sammarbetsprodukter är underbarar mål för elak kod och “distrubition” av äkta dynga… Viruses.

Forefront Security Exchange. Problem Meddelande system och sammarbetsprodukter är underbarar mål för elak kod och “distrubition” av äkta dynga… Viruses.
Copyright © 2007 - The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike.

Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the Creative Commons Attribution-ShareAlike.

Similar presentations

Ads by Google