Risk
12/11/2012
02:54 PM
Dark Reading
Dark Reading
Slideshows
Connect Directly
RSS
E-Mail
50%
50%

Slide Show: 10 Security-Service Startups To Remember In 2012

With the security services market growing by more than 23 percent per year, it's no wonder that 2012 had its share of startup launches and young companies taking off
Previous
1 of 11
Next


The interaction between two strong business trends -- security services and cloud services -- made 2012 a strong year for startups combining aspects of both industries. Companies offering cloud security services were expected to accumulate $1.9 billion in revenue this year, a figure that is expected to grow to $4.2 billion in 2016, according to business-analysis firm Gartner.

Using cloud security gateways to manage identity and mobile users, as well as threat analysis services, were among the strongest trends this year, says Lawrence Pingree, research director at Gartner. Companies such as PwnedList and WWPass focused on protecting identity, albeit in different ways, while CrowdStrike, Lastline, and SecurityStarfish focused on threat intelligence and gaining information on attackers. Such services -- security information and event management (SIEM) and security intelligence engines -- top the list of services that companies plan to adopt in the next 24 months, Pingree says.

A number of companies that were focused on the same trends didn't make this list, because they did not qualify as startups, did not announce services, or were focused strictly on consumers. Six-year-old OpenDNS, for example, launched its Umbrella service to help secure nomadic workers, while secretive BlueBox plans to unveil its own service -- likely next year -- to help companies lock down mobile devices. And Jumpshot, a service funded through Kickstarter and started by two security researchers, aims to simplify IT for consumers.

Another area to watch: Cloud-service brokerages. In the near future, cloud-service gateways will become a key way that CIOs can manage their company's use of cloud services, reigning in the shadow information-technology that undermines companies' security, says Pingree.

"Business groups are swiping their credit cards and going around IT, and they represent risk to the organization," he says. "Anything that helps the CIO gain visibility into that ... companies are looking at."

Previous
1 of 11
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Must Reads - September 25, 2014
Dark Reading's new Must Reads is a compendium of our best recent coverage of identity and access management. Learn about access control in the age of HTML5, how to improve authentication, why Active Directory is dead, and more.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-5485
Published: 2014-09-30
registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.

CVE-2012-5486
Published: 2014-09-30
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.

CVE-2012-5487
Published: 2014-09-30
The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.

CVE-2012-5488
Published: 2014-09-30
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.

CVE-2012-5489
Published: 2014-09-30
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
In our next Dark Reading Radio broadcast, we’ll take a close look at some of the latest research and practices in application security.