Partners

Teros develops innovative security solutions that protect enterprises from intrusion and damage at the Web application level, the fastest growing area of information system vulnerability. The company’s flagship Application Protection System™ (APS) products protect Web applications for large enterprises, financial institutions, healthcare companies, online retailers and service providers, and government organizations as part of a layered security architecture.

nCipher and Teros Solution Overview

Most malicious hacking attacks are targeted at the Web application level. Unlike intrusion detection and virus scanning solutions that can only analyze against known signatures after an intrusion has occurred, the APS blocks malicious activity from ever reaching the Web servers and corrupting or compromising corporate data. The challenge is to maintain this ability to analyze traffic even when the connections to the Web site are encrypted using SSL. Processing SSL can impose a serious performance penalty if not implemented correctly, and the act of opening up a window to inspect SSL encrypted traffic creates a security loop-hole that could be used by hackers to extract sensitive or private information.

“Web application firewalls and SSL are vital and complementary components in enterprise security architectures.”
–Neil Osipuk, directing analyst, Infonetics Research

The combination of Teros’s APS device and nCipher’s nForce hardware security module (HSM) overcomes both these issues and results in a system capable of real-time analysis of user activity—even when SSL security is enabled. The result is a FIPS- (Federal Information Processing Standard) certified security infrastructure that can eliminate known and unknown Web vulnerabilities, without adding latency to the network and therefore harming the user experience.

Teros APS™ key features and benefits

• Protection from malicious Web attacks, including denial-of-service, repeat attacks, cookie tampering, buffer overflows, form mismatches, URL and credential tampering, session state modification, HTML header tampering, script tampering, SQL insertion, and others.
• Enterprise Performance and Scalability, with support for unlimited concurrent users; up to 750 hits/second without degradation; scales using multiple nodes; typical latency of less than 1ms per request (negligible).
• Simple Installation and Powerful Management, including support for standard enterprise management tools, application level logging and reporting, and automatic monitoring with proactive alerts.
• Compatible with your existing systems, including all Web servers (including IIS, Netscape, Apache), all Web browsers, major load balancers, all application servers (Sun, Oracle, IBM); as well as compliant with HTTP 1.0 RFC 1945, RFC 2068, 2616, HTML 4.0 and CSS, client side scripting, SSL and Global ID, and SNMP version 2c and 3.
• Simple Configuration and Deployment, the APS is an easily deployed 1U appliance which sits behind firewall and in front of application and Web servers.