Risk
12/11/2012
02:54 PM
Dark Reading
Dark Reading
Slideshows
Connect Directly
RSS
E-Mail
50%
50%

Slide Show: 10 Security-Service Startups To Remember In 2012

With the security services market growing by more than 23 percent per year, it's no wonder that 2012 had its share of startup launches and young companies taking off
Previous
1 of 11
Next


The interaction between two strong business trends -- security services and cloud services -- made 2012 a strong year for startups combining aspects of both industries. Companies offering cloud security services were expected to accumulate $1.9 billion in revenue this year, a figure that is expected to grow to $4.2 billion in 2016, according to business-analysis firm Gartner.

Using cloud security gateways to manage identity and mobile users, as well as threat analysis services, were among the strongest trends this year, says Lawrence Pingree, research director at Gartner. Companies such as PwnedList and WWPass focused on protecting identity, albeit in different ways, while CrowdStrike, Lastline, and SecurityStarfish focused on threat intelligence and gaining information on attackers. Such services -- security information and event management (SIEM) and security intelligence engines -- top the list of services that companies plan to adopt in the next 24 months, Pingree says.

A number of companies that were focused on the same trends didn't make this list, because they did not qualify as startups, did not announce services, or were focused strictly on consumers. Six-year-old OpenDNS, for example, launched its Umbrella service to help secure nomadic workers, while secretive BlueBox plans to unveil its own service -- likely next year -- to help companies lock down mobile devices. And Jumpshot, a service funded through Kickstarter and started by two security researchers, aims to simplify IT for consumers.

Another area to watch: Cloud-service brokerages. In the near future, cloud-service gateways will become a key way that CIOs can manage their company's use of cloud services, reigning in the shadow information-technology that undermines companies' security, says Pingree.

"Business groups are swiping their credit cards and going around IT, and they represent risk to the organization," he says. "Anything that helps the CIO gain visibility into that ... companies are looking at."

Previous
1 of 11
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2009-5142
Published: 2014-08-21
Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the src parameter.

CVE-2010-5302
Published: 2014-08-21
Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 (r88), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.

CVE-2010-5303
Published: 2014-08-21
Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to $errorString.

CVE-2014-3562
Published: 2014-08-21
Red Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote attackers to obtain sensitive replicated metadata by searching the directory.

CVE-2014-3577
Published: 2014-08-21
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Three interviews on critical embedded systems and security, recorded at Black Hat 2014 in Las Vegas.