Risk
12/11/2012
02:54 PM
Dark Reading
Dark Reading
Slideshows
Connect Directly
RSS
E-Mail
50%
50%
Repost This

Slide Show: 10 Security-Service Startups To Remember In 2012

With the security services market growing by more than 23 percent per year, it's no wonder that 2012 had its share of startup launches and young companies taking off
Previous
1 of 11
Next


The interaction between two strong business trends -- security services and cloud services -- made 2012 a strong year for startups combining aspects of both industries. Companies offering cloud security services were expected to accumulate $1.9 billion in revenue this year, a figure that is expected to grow to $4.2 billion in 2016, according to business-analysis firm Gartner.

Using cloud security gateways to manage identity and mobile users, as well as threat analysis services, were among the strongest trends this year, says Lawrence Pingree, research director at Gartner. Companies such as PwnedList and WWPass focused on protecting identity, albeit in different ways, while CrowdStrike, Lastline, and SecurityStarfish focused on threat intelligence and gaining information on attackers. Such services -- security information and event management (SIEM) and security intelligence engines -- top the list of services that companies plan to adopt in the next 24 months, Pingree says.

A number of companies that were focused on the same trends didn't make this list, because they did not qualify as startups, did not announce services, or were focused strictly on consumers. Six-year-old OpenDNS, for example, launched its Umbrella service to help secure nomadic workers, while secretive BlueBox plans to unveil its own service -- likely next year -- to help companies lock down mobile devices. And Jumpshot, a service funded through Kickstarter and started by two security researchers, aims to simplify IT for consumers.

Another area to watch: Cloud-service brokerages. In the near future, cloud-service gateways will become a key way that CIOs can manage their company's use of cloud services, reigning in the shadow information-technology that undermines companies' security, says Pingree.

"Business groups are swiping their credit cards and going around IT, and they represent risk to the organization," he says. "Anything that helps the CIO gain visibility into that ... companies are looking at."

Previous
1 of 11
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-0360
Published: 2014-04-23
Memory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCtn22376.

CVE-2012-1317
Published: 2014-04-23
The multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a denial of service (Route Processor crash) by sending packets at a high rate, aka Bug ID CSCts37717.

CVE-2012-1366
Published: 2014-04-23
Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.

CVE-2012-3062
Published: 2014-04-23
Cisco IOS before 15.1(1)SY, when Multicast Listener Discovery (MLD) snooping is enabled, allows remote attackers to cause a denial of service (CPU consumption or device crash) via MLD packets on a network that contains many IPv6 hosts, aka Bug ID CSCtr88193.

CVE-2012-3918
Published: 2014-04-23
Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service (serial-interface outage) via certain Frame Relay traffic, aka Bug ID CSCub13317.

Best of the Web