Authentication. Security. Trust. - Globalsign

Transcription

Authentication. Security. Trust.HackAlert – Malware MonitoringUnderstanding the reselling opportunity for OnlineSecurity Services GlobalSign. A GMO Internet Inc group company.

Reselling Malware Monitoring The GlobalSign Partner Program is designed for ISPs,Web Hosts, Integrators, Domain Registrars and VARswho wish to integrate security services into their ownproduct range. The threat of malware The GlobalSign solution - Hackalert The reseller model Why partner with GlobalSign?Authentication. Security. Trust.www.globalsign.com

The threat of malware Web-based Malware - (Drive-by Downloading) is ahacking technique which injects malicious code intowebsites. Unwanted malicious software is downloaded andinstalled on the PC of anyone visiting the websitewithout their knowledge or consent. Malware has devastating effects on both the owner of the infected website and all visitors tothe infected site. For the website’s visitorFor the visitor, the impact can be stolen information such as financial data including online banking credentials and credit card details. Theft ofpersonal information in this manner also leads in increased incidences of email hijacking, fraudulent access to social networking sites, and in manycases, identity theft. For the website ownerWebsites hosting malware often quickly become flagged or blacklisted by organisations such as Google. Google flagging has the greatest negativeeffect on websites as traffic is literally driven away from the site, due to Google posting warnings against visiting the site directly, or worse yet,completely removing the site from search results all together. For website owners, blacklisting results in damage to business reputation, sharp dropin website traffic and ultimately in revenues.Malware monitoring helps you protect your infrastructure and protect your hostedwebsites from distributing malwareAuthentication. Security. Trust.www.globalsign.com

The threat of malwareThe importance of malware monitoring As hackers typically seek the greatest economy of scale,attacking a hosting company’s infrastructure results inthe highest return on effort. In August 2010, malware experts identified an infectionin the Network Solutions infrastructure – a widgethoused on Network Solution pages. The infection resulted in the Koobface malware (a virusthat “phones home” for further instructions) beingwidely distributed.This kind of malware injection attack puts thereputation of the hosting company at risk, not justthe hosted customer.Authentication. Security. Trust.“Our Security Team was alerted thispast weekend to a malicious code thatwas added to a widget housed on oursmall business blog,growsmartbusiness.com. This widgetwas used to provide small businesstips on Network Solutions’ underconstruction pages. We haveremoved the widget from those pagesand continue to check and monitor toensure security. The number ofimpacted pages that have reportedpublicly over the weekend are notaccurate. We’re still investigating thenumber of web pages affected.If you have downloaded theGrowSmartBusiness widget to yourwebsite, we recommend you deletethat widget and scan your site .globalsign.com

The GlobalSign solution - HackAlert HackAlert malware monitoring helps protect website owners and their visitors by: Providing monitoring for malicious code injection and drive-by-downloads Giving due warning of an infection Facilitating timely removal of the injected code by providing details of the infection HackAlert is a cloud-based hosted Software Service (Saas) - users do not have todownload or install any software nor run any executables. Hackalert crawls awebsite and actively analyzes the content on each page for signs of compromise. HackAlert uses numerous techniques toensure malicious code is identifiedquickly and even the most advancedmalware distribution techniques areefficiently identified.Authentication. Security. Trust.www.globalsign.com

The GlobalSign solution - HackAlertHACKALERT FEATURES Identifies drive-by downloads and zero-day malware threats hidden inwebsites and online advertisements Optimizes multiple analysis techniques to detect malware drive-bydownloads targeting end-users before the website is flagged by searchengines as malicious Protects your clients and customers from malware injection and maliciousadvertising (malvertising) Deploys globally distributed crawler and analyzer agents for non-intrusive24x7x365 drive-by download monitoring Identifies active malware downloads as well as links to dormant malwarebefore the website is flagged by search engines such as Google Displays injected code snippets to facilitate immediate malware removal andcode-level remediation Reports injected page, malware source, browser vulnerability being exploitedand drive-by download destination.Authentication. Security. Trust.www.globalsign.com

The reseller model Security services are a critical component of the hosting provider’s value chain andoffer a significant value-add to product portfolios.Core ServicesDomainRegistrationWeb SiteHostingMail ServersSecurity ServicesSSL CertificatesMalwareMonitoringMarketingWeb Site DesignEcommerce CartsSEOSEM The hosting company immediately benefits from a more complete and stickyportfolio and increased revenues. Hosting companies can adopt across all customers the basic scanning service, withupsell paths to higher value / higher risk sites. This may be added as part of thehosting bundle, or even as a value-add service to protect the hosting company’sgood name in the industry.Authentication. Security. Trust.www.globalsign.com

The reseller model GlobalSign provides a range of Malware Monitoring solutions to suit the specificneeds of your customer base:Malware Monitoring PlanCustomer ProfileBasicEntry level, low risk web sites. A daily scan of the first pages of a single site alerts theweb site owner by email if malware is identified.Basic PlusAs per the Basic plan, but with the number of pages scanned increased to expandMalware Monitoring coverage.PremiumAimed at higher risk web sites. The number of pages scanned daily is further increasedand additional patent pending malware identification technologies such as behaviouranalysis and exploit analysis are introduced. Customers are given access to a web portalto monitor reports and gain insight into risks and remedial actions.Premium plusIdeal for higher risk, larger web sites. As per the Premium Plan but with the pagesscanned further increased.CustomThe Custom Plan is a customized version of the Premium plan available to larger hostingcompanies wishing to specify the scan frequency and the number of pages scanned.Authentication. Security. Trust.www.globalsign.com

The reseller model Malwaremonitoring plansThe GlobalSign MalwareMonitoring plans aredesigned to provide varyinglevels of alert protectionbased on web site size, scanfrequency and managementtools needed:Basic HostingPlanBasic PlusHosting PlanPremiumHosting PlanPremium PlusHosting PlanMax pages/Sites10100200500Scan um SiteCommitAuthentication. Security. Trust.Custom PlanSignatureSignature(Static Analysis)(Static Analysis)DOM ParsingDOM ParsingSignatureSignature(Static Analysis)(Static Analysis)(Static Analysis)(Static Analysis)Blacklist Lookup Blacklist LookupDOM ParsingDOM ParsingSpywareSpywareAny selection of(Static Analysis)(Static Analysis)BehaviorBehaviorany plan reBlacklist LookupBlacklist LookupExtractorExtractorpages/frequencyExploit AnalysisExploit AnalysisBehaviorBehaviorAnalysisAnalysisLine of Offending Line of OffendingCodeCodeLine of Offending Line of OffendingHTTPS SupportHTTPS SupportCodeCodeWeekly ReportsWeekly ReportsHTTPS SupportHTTPS SupportUI AccessUI AccessEmail Notification Email NotificationEmail Notification Email NotificationSite SealSite Seal200100100100www.globalsign.com

Why partner with GlobalSign The GlobalSign Partner Program is built around theneeds of hosting companies, fulfilling both technical andmarketing requirements. GlobalSign offers 4 levels of partnership to suit yourindividual requirements: Authorized Partners receive instant discounts, a reseller partnerportal, canned sales and marketing resources and instant access totechnical support. Silver, Gold and Platinum Partners receive accelerated discounts,access to the advanced APIs, dedicated marketing assistance,varying levels of co-marketing / co-branding opportunities & featureprioritisation.Authentication. Security. Trust.www.globalsign.com

Why partner with GlobalSign With fantastic margins andincreased revenue potential,the reseller program enablingyou to generate new revenuestreams, expand your productportfolio and provide the bestMalware Monitoring there isavailable. With an extremely fast returnon investment and the optionof no commitment, it alsoinvolves minimal time, effortand resources.Authentication. Security. Trust.New &RepeatRevenueFree Sales rwithGlobalSign?ScalableIntegration /AutomationToolsThe BestSecurityServiceproductsDedicatedTechnical &AccountSupportwww.globalsign.com

Protect your infrastructure and your customers Talk to GlobalSign today and add MalwareMonitoring to your portfolio Learn more about our Partner Program at: http://www.globalsign.com/partners/ Read White Paper n. Security. Trust.www.globalsign.com

HackAlert - Malware Monitoring Understanding the reselling opportunity for Online Security Services . Authentication. Security. Trust. . HackAlert is a cloud-based hosted Software Service (Saas) - users do not have to download or install any software nor run any executables. Hackalert crawls a