TicketNetwork 通过 SecureSphere 增强安全性和合规性
技术
- 应用基础设施与中间件 - 事件驱动型应用
- 网络安全和隐私 - 安全合规
适用行业
- 国家安全与国防
适用功能
- 产品研发
- 质量保证
用例
- 租赁金融自动化
- 机器间付款
服务
- 测试与认证
关于客户
TicketNetwork 是一家成立于 2002 年的软件公司，为第三方门票卖家和买家提供在线交易。该公司被《Inc.》杂志以及跨国公司德勤和安永评为发展最快的组织之一。 TicketNetwork® Online Exchange 被数千名门票销售商使用，每天提供超过 700 万张门票。这包括有额外门票出售的球迷和正规的门票经纪公司。该公司是 1 级服务提供商，处理大量信用卡交易，因此安全性和 PCI 合规性成为重中之重。
挑战
TicketNetwork 是一个快速发展的在线票务交换平台，由于其业务性质，面临着重大的安全挑战。该公司为第三方门票卖家和买家提供交易便利，由于其处理的信用卡交易量很大，因此成为黑客的主要目标。作为 1 级服务提供商，维持 PCI 合规性是 TicketNetwork 的一项主要企业举措。尽管没有经历过任何数据泄露，该公司仍热衷于确保其安全措施稳健有效。此外，该公司需要一种能够处理大量流量、阻止恶意 IP 地址并快速部署以立即实现合规性和安全性的解决方案。
解决方案
为了解决安全挑战，TicketNetwork 部署了 Imperva 的 SecureSphere Web 应用程序防火墙 (WAF)。该解决方案提供了数据访问和使用的全面可见性，其用户友好的界面允许精细的策略创建和实施，以防止未经授权的访问或数据更改。 SecureSphere 还能够扩展以保护大量交易并阻止来自机器人和其他自动攻击的流量。该解决方案是安全开发生命周期策略的一部分，开发人员在桌面上使用代码分析，并对编译后的代码进行渗透测试。 SecureSphere 充当该策略的最后一层，为所有新旧应用程序提供持续保护。
运营影响
数量效益
Case Study missing?
Start adding your own!
Register with your work email and create a new case study profile for your business.
相关案例.
Case Study
Data Capture for Afghanistan Forces
Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.
Case Study
Enhancing Security and Compliance in Remitly's Global Money Transfer Service with Fastly
Remitly, an online remittance service, was faced with the challenge of securing its proprietary global transfer network. The company needed a security solution that could meet PCI requirements and protect customers' sensitive transactions through its mobile application. The solution had to be capable of defending against new and emerging attack types without impacting performance. Remitly also had to deal with irregular traffic patterns, such as a sudden spike in account transfers from a small network segment on the Pacific coastline of South America. The company needed to determine in real time whether such traffic indicated an attack or valid requests. A traditional web application firewall (WAF) would not be able to distinguish this traffic, potentially leading to customer frustration if the IP was blacklisted.
Case Study
Major Aerospace Company Automates Asset Management
The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.
Case Study
Securing a Large Data Center in the EMEA Region: An IoT Case Study
A leading data-center operator in the EMEA region, with multiple facilities spanning over 25,000 square meters, faced significant security challenges. The operator experienced interruptions in their internal IT network due to unsupervised work of third-party technicians. Despite having a high-end building control system that provided 24x7 monitoring and control to all the building’s infrastructure, the data center was vulnerable from a cyber perspective as it was connected to the IT network infrastructure. The operator launched an urgent OT cyber security project that included both IT-OT network segmentation and OT network asset mapping and anomaly detection. The main objectives were to harden the security of the server systems, secure the facility’s power supply and server cooling system, strengthen the segmentation between building and operational systems, create a visual OT network map, and set up a system for presenting supply-chain attacks that may threaten the data center through equipment vendors’ maintenance activities.
Case Study
Leveraging Graph Technology for Enhanced Cybersecurity: A Case Study on MITRE's CyGraph
MITRE, a federally-funded, not-for-profit company that manages seven national research and development laboratories in the United States, was grappling with the challenge of managing an influx of cybersecurity data. The constant changes in network environments were impacting the security posture of U.S. government agencies. Intrusion alerts, anti-virus warnings, and seemingly benign events like logins, service connections, and file share access were all potentially associated with adversary activity. The cybersecurity researchers at MITRE needed to go beyond rudimentary assessments of security posture and attack response. This required merging isolated data into higher-level knowledge of network-wide attack vulnerabilities and mission readiness. The challenge was not the lack of information, but the ability to assemble disparate pieces of information into an overall analytic picture for situational awareness, optimal courses of action, and maintaining mission readiness. The team also struggled with fully comprehending a given security environment and mapping all known vulnerabilities.
Case Study
Enhancing Security Precision with IoT: A Case Study of Guardsman Group
Guardsman Group, a leading security company in the Caribbean, faced a significant challenge in maintaining the security of its digital infrastructure. The company provides security equipment, personnel, and systems for various businesses across the region. However, one of its offices experienced a security incident that affected all communications at that location. The existing security tools were not sufficient to provide the necessary protection, and it took hours to identify the source of the issue. This incident highlighted the need for a dynamic solution that could proactively identify threats. The company's primary concern was any disruption to its business, as it manages a significant portion of Jamaica's money and cannot afford for its operations to go down.
