Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

6/22/2010
05:52 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Trustwave Acquires Breach Security

Deal creates a single-source WAF and application penetration testing solution

CHICAGO (June 22, 2010) Trustwave, a leading provider of information security and compliance solutions, announces it has acquired Breach Security, a leading provider of web application firewall technology. The terms of the deal are confidential.

A web application firewall (also known as an application-layer firewall or WAF) is an appliance or software that provides protection for web applications (such as an e-commerce site) against attacks. In addition to continuing to offer and support one of the industrys leading enterprise-grade WAF technologies as a point solution, Trustwave will also integrate the WAF into its existing application security suite delivered through its SpiderLabs advanced security team to provide complete web application life cycle protection. Trustwaves SpiderLabs is a leading provider of application security programs, including penetration testing, secure code review, security-focused software development training and incident response.

When combined, WAF and application penetration testing more effectively protect applications from cybercriminals than each of the solutions deployed in a stand-alone manner. As noted in Trustwaves SpiderLabs 2010 Global Security Report, SQL injection a code injection technique that exploits a security vulnerability occurring in the database layer of an application is one of the top attack methods employed by hackers to gain unauthorized access to information. While application penetration testing and WAF technologies are both designed to thwart such attacks, implementing the two solutions together presents an entirely new challenge for cybercriminals. Hackers increasingly target insecure web applications as their point of entry into an organizations network, said Sanjay Mehta, CEO of Breach Security. Adding WAF to Trustwaves application security suite provides customers with an unrivaled defense-in-depth solution to secure applications throughout the software development lifecycle.

Breach Securitys WebDefend application firewall appliance, deployed by enterprises and small and mid-sized businesses, features inbound and outbound inspection of web traffic for sensitive data, such as credit card and Social Security numbers. This advanced web application firewall offers customized, behavior-based security, tuned for each protected application. WebDefend uses a patented profiling system and multiple, collaborative detection engines to ensure the flow of mission-critical traffic while supplying complete protection for applications to keep an organizations confidential information safe from targeted attacks and leaks. In addition, Breach Security has been the primary custodian of ModSecurity, the most widely deployed web application firewall in the world with more than 10,000 deployments. Trustwaves legacy of providing threat intelligence to the security community through SpiderLabs will be enhanced with our commitment to support ModSecurity and its diverse and widespread user base. Application penetration testing and web application firewalls also provide compliance with requirement 6.6 of the Payment Card Industry Data Security Standard (PCI DSS).

Trustwaves acquisition of Breach Security further strengthens their commitment to providing customers with a complete application security program, says Ed DeMeo, director distribution and information services at Uniek Inc., the largest designer and manufacturer of picture frames and home dcor accents for retailers in North America. Adding WAF to SpiderLabs real-time research is a powerful combination to help ensure web applications are always protected and sensitive data is secure.

This acquisition adds more truly innovative technology to Trustwaves product portfolio, significantly enhancing our ability to help our clients secure their information, said Robert J. McCullen, chairman and CEO of Trustwave. Combining an industry leading WAF solution with our SpiderLabs services should make our application security capabilities unmatched in the industry. About Trustwave Trustwave is the leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with todays challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper' compliance management software and other proprietary security solutions. Trustwave has helped thousands of organizationsranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailersmanage compliance and secure their network infrastructure, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, Asia and Australia. For more information, visit https://www.trustwave.com.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Edge-DRsplash-10-edge-articles
7 Old IT Things Every New InfoSec Pro Should Know
Joan Goodchild, Staff Editor,  4/20/2021
News
Cloud-Native Businesses Struggle With Security
Robert Lemos, Contributing Writer,  5/6/2021
Commentary
Defending Against Web Scraping Attacks
Rob Simon, Principal Security Consultant at TrustedSec,  5/7/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-36289
PUBLISHED: 2021-05-12
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and fro...
CVE-2021-32606
PUBLISHED: 2021-05-11
In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.)
CVE-2021-3504
PUBLISHED: 2021-05-11
A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to...
CVE-2021-20309
PUBLISHED: 2021-05-11
A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to ...
CVE-2021-20310
PUBLISHED: 2021-05-11
A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this...