Web application security brought into focus

Web application security firm Bee Ware has struck a deal with Telindus, one of Europe’s largest IT service providers, whereby Telindus will offer Bee Ware's security products as part of its managed security and system integration services.

The deal reflects the growing shift from network-based security threats to application vulnerabilities. It means companies running high-profile web applications will find it easier to integrate application protection into new projects.

Application-based attacks have taken over from conventional network hacking as the biggest security threat to companies. Three out of five incursions against companies are now application-based attacks, Stephan Mesguich, Bee Ware's vice president of sales told vnunet.com.

Application attacks are more difficult to defend against and cause greater financial and operational damage because they target critical data, such as online applications and customer records.

SQL injection, PHP include and Cross-Site Scripting are now the three biggest security threats and account for 45 per cent of today’s attacks.

“We chose Bee Ware because it scored highest on the criteria of attack detection, ease of use and management capabilities," said Bart Geeraerts, cluster manager of business innovation security at Telindus.

"We believe that with their advanced technology Bee Ware provide the best fit to compliment our integration and managed service skills.”

Underlying Bee Ware's portfolio of application security products is a technology called ICX – the intelligent correlation engine – which identifies, classifies and filters web traffic using a blend of three techniques. It is designed to detect both known and unknown application attacks as well as monitor for malicious application behaviour.

Bee Ware's products include: i-Watch, an application attack and vulnerability monitor; i-Sentry, a secure application gateway; and i-Trust for web single sign-on.