DigiCert 借助 Imperva 增强 AWS 环境安全性
技术
- 应用基础设施与中间件 - 事件驱动型应用
- 网络安全和隐私 - 应用安全
适用行业
- 玻璃
- 国家安全与国防
适用功能
- 维护
用例
- 篡改检测
- 交通监控
服务
- 云规划/设计/实施服务
关于客户
DigiCert 是可扩展的 TLS/SSL 和 PKI 身份和加密解决方案提供商。该公司因其针对网络服务器和物联网设备的身份和加密服务而被近 90% 的财富 500 强公司和全球 100 家最大银行中的 97 家选择。 DigiCert 通过其证书生命周期管理平台 CertCentral® 支持任何规模的 PKI 部署的 TLS/SSL 和其他数字证书。该公司因其企业级证书管理平台、快速且知识丰富的客户支持以及安全解决方案而受到认可。 DigiCert 拥有 1200 多名员工，总部位于美国犹他州李海，在全球设有 12 多个分支机构。
挑战
DigiCert 是一家可扩展 TLS/SSL 和 PKI 解决方案提供商，当他们开始将部分工作负载迁移到 Amazon Web Services (AWS) 时，他们已经在使用 Imperva 的 SaaS Web 应用程序防火墙 (WAF) 来保护其本地应用程序。然而，他们在 AWS 上使用另一家供应商进行 DDoS 缓解，但由于过度清理流量和阻止合法流量，他们发现效果并不令人满意。随着 DigiCert 对 AWS 的使用不断增长，他们意识到需要一种新的安全解决方案来管理风险、监控所有流量、快速识别威胁并只允许有效流量访问其应用程序。他们希望来自单一提供商的解决方案能够在整个混合环境中提供 WAF 保护和 DDoS 缓解。该解决方案还需要降低误报，确保快速响应以最大程度地减少潜在的业务中断，并在时间和资源限制的情况下尽可能多地自动化安全流程。
解决方案
DigiCert 实施了 Imperva 来保护其混合环境。他们扩大了对 Imperva WAF（他们已经在本地使用）的使用，以将保护扩展到 AWS 并在迁移期间和迁移后保持安全态势。 Imperva 的威胁检测技术、先进的客户端分类技术、众包和 IP 信誉数据可自动分析流量，以识别和阻止 Web 应用程序攻击。精细的过滤器和控制可减少误报并防止不需要的访问者进行访问，而 IP 地址屏蔽则隐藏 Web 服务器的 IP 地址。 Imperva 一直在 DigiCert 的 AWS 工作负载在云上运行的整个过程中提供保护。该解决方案提高了对本地和 AWS 上的应用程序环境的可见性，并持续监控行为并在发现可疑活动时发送自动警报。 Imperva 解决方案的多功能性为 DigiCert 的混合应用程序工作负载提供完全集成的保护，并允许他们从单一管理平台管理其安全工作。
运营影响
数量效益
Case Study missing?
Start adding your own!
Register with your work email and create a new case study profile for your business.
相关案例.
Case Study
Data Capture for Afghanistan Forces
Electronic equipments on the field of Afghanistan provided information on the status of the vehicle and to identify potential threats surrounding it to the British Force. The monitoring and interpretation of this data requires robust and sophisticated digitization for data capture and communication.
.png)
Case Study
Discrete Manufacturing Industries (Fiberglass Pipe)
The implementation of ERP software in a Discrete Manufacturing organization needs to be strategic, irrespective of its size and capacity. The client had already implemented an ERP system which fulfilled their requirements but was not efficient enough. Efficiency here meant Synchronized Planning, Updating and Multisite Planning. Planning at client’s place was done outside the ERP system. Lack of proper synchronization to the ERP system paved way to huge delays in the changes getting updated in the system. These delays caused disruption in achieving delivery schedules. Multisite Planning is a solution to an organization which has multiple production units (may or may not be geographically separated) and thus needs planning across these units to synchronize production activities within them. The client also has multiple factories and hence Production Planning control is very essential in their case. Since Multisite planning was not possible with Baan ERP system, this was another bottleneck for the client.
Case Study
Major Aerospace Company Automates Asset Management
The O&M division of an aerospace and global security company was using spreadsheets to manually track more than 3,000 assets assigned to students and staff. Maintaining audit trails for this high volume of equipment became increasingly time-consuming and challenging. The chore involved knowing precisely what equipment was on hand, what had been issued, its location and the name of the custodial owner of each item. Every aspect of this task was carried owner of each item. Every aspect of this task was carried out by individuals with spreadsheets. Manually documenting the full lifecycle of each asset added to the burden. This included tracking maintenance requirements and records, incidents and damages, repairs, calibrations, depreciation, and end-of-life data.
Case Study
Securing a Large Data Center in the EMEA Region: An IoT Case Study
A leading data-center operator in the EMEA region, with multiple facilities spanning over 25,000 square meters, faced significant security challenges. The operator experienced interruptions in their internal IT network due to unsupervised work of third-party technicians. Despite having a high-end building control system that provided 24x7 monitoring and control to all the building’s infrastructure, the data center was vulnerable from a cyber perspective as it was connected to the IT network infrastructure. The operator launched an urgent OT cyber security project that included both IT-OT network segmentation and OT network asset mapping and anomaly detection. The main objectives were to harden the security of the server systems, secure the facility’s power supply and server cooling system, strengthen the segmentation between building and operational systems, create a visual OT network map, and set up a system for presenting supply-chain attacks that may threaten the data center through equipment vendors’ maintenance activities.
Case Study
Enhancing Security Precision with IoT: A Case Study of Guardsman Group
Guardsman Group, a leading security company in the Caribbean, faced a significant challenge in maintaining the security of its digital infrastructure. The company provides security equipment, personnel, and systems for various businesses across the region. However, one of its offices experienced a security incident that affected all communications at that location. The existing security tools were not sufficient to provide the necessary protection, and it took hours to identify the source of the issue. This incident highlighted the need for a dynamic solution that could proactively identify threats. The company's primary concern was any disruption to its business, as it manages a significant portion of Jamaica's money and cannot afford for its operations to go down.
Case Study
Asia Airfreight Terminal Enhances Operational Efficiency with CommScope's RUCKUS Solutions
Asia Airfreight Terminal (AAT), a leading cargo handling company based out of Hong Kong International Airport, was facing challenges with its Wi-Fi network, which was critical for the functioning of its automated Material Handling System (MHS) within the warehouse. Any interference or lost signals could directly impact their operational efficiency. AAT also had separate networks for their office and CCTV cameras, which made the job of their data center challenging. The company was in search of a Wi-Fi network configuration that could streamline their networks and reduce its network management workload. AAT was already running on equipment from a competing vendor, and the new solution needed to prove its worth in scalability and reliability.
