Risk
12/11/2012
02:54 PM
Dark Reading
Dark Reading
Slideshows
50%
50%

Slide Show: 10 Security-Service Startups To Remember In 2012

With the security services market growing by more than 23 percent per year, it's no wonder that 2012 had its share of startup launches and young companies taking off
Previous
1 of 11
Next


The interaction between two strong business trends -- security services and cloud services -- made 2012 a strong year for startups combining aspects of both industries. Companies offering cloud security services were expected to accumulate $1.9 billion in revenue this year, a figure that is expected to grow to $4.2 billion in 2016, according to business-analysis firm Gartner.

Using cloud security gateways to manage identity and mobile users, as well as threat analysis services, were among the strongest trends this year, says Lawrence Pingree, research director at Gartner. Companies such as PwnedList and WWPass focused on protecting identity, albeit in different ways, while CrowdStrike, Lastline, and SecurityStarfish focused on threat intelligence and gaining information on attackers. Such services -- security information and event management (SIEM) and security intelligence engines -- top the list of services that companies plan to adopt in the next 24 months, Pingree says.

A number of companies that were focused on the same trends didn't make this list, because they did not qualify as startups, did not announce services, or were focused strictly on consumers. Six-year-old OpenDNS, for example, launched its Umbrella service to help secure nomadic workers, while secretive BlueBox plans to unveil its own service -- likely next year -- to help companies lock down mobile devices. And Jumpshot, a service funded through Kickstarter and started by two security researchers, aims to simplify IT for consumers.

Another area to watch: Cloud-service brokerages. In the near future, cloud-service gateways will become a key way that CIOs can manage their company's use of cloud services, reigning in the shadow information-technology that undermines companies' security, says Pingree.

"Business groups are swiping their credit cards and going around IT, and they represent risk to the organization," he says. "Anything that helps the CIO gain visibility into that ... companies are looking at."

Previous
1 of 11
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading, January 2015
To find and fix exploits aimed directly at your business, stop waiting for alerts and become a proactive hunter.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7402
Published: 2014-12-17
Multiple unspecified vulnerabilities in request.c in c-icap 0.2.x allow remote attackers to cause a denial of service (crash) via a crafted ICAP request.

CVE-2014-5437
Published: 2014-12-17
Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote management via a request to remote_management.php,...

CVE-2014-5438
Published: 2014-12-17
Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary web script or HTML via the computer_name parameter to connected_devices_computers_edit.php.

CVE-2014-7170
Published: 2014-12-17
Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service.

CVE-2014-7285
Published: 2014-12-17
The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.