下载PDF
Fastly > 实例探究 > 增强云优先微服务基础设施的安全性和可见性:OFX 案例研究
Fastly Logo

OFX Enhances Application Security with Fastly Next-Gen WAF

技术
  • 应用基础设施与中间件 - 事件驱动型应用
  • 网络安全和隐私 - 应用安全
适用行业
  • 电网
  • 国家安全与国防
适用功能
  • 质量保证
用例
  • 供应链可见性(SCV)
  • 篡改检测
服务
  • 云规划/设计/实施服务
  • 测试与认证
挑战
OFX 是一个国际金融转账平台,希望在其云优先微服务基础设施中提高可见性并防范 OWASP 攻击和身份验证滥用。
关于客户
OFX 是一家位于澳大利亚悉尼的国际金融转账平台,每年通过其网络应用程序处理超过 220 亿美元的资金。他们最近完成了向云的全面迁移,并希望确保其微服务的安全性。
解决方案
OFX 在其中层环境中部署了 Fastly Next-Gen WAF,并在其 Web 服务器上设置了代理,以获得深入的应用程序可见性并有效阻止恶意流量。他们使用电源规则来建立正常身份验证流量的基线,并创建自定义阈值来检测和阻止可疑活动。
运营影响
  • The deployment of Fastly Next-Gen WAF has provided OFX with a significant increase in visibility and protection against OWASP attacks and authentication abuse. The solution was easy to install and use, and it effectively blocked malicious traffic automatically without causing production incidents. The quality assurance team uses the Fastly Next-Gen WAF monitoring via easy-to-consume dashboards as a part of their release protocols to catch any issues quickly. The Fastly Next-Gen WAF Power Rules have also allowed OFX to gain visibility into the origin IP and behavior of user logins to detect suspicious actors and patterns. This has resulted in a more secure and efficient operation.
数量效益
  • OFX processes over $22 billion annually through its web application.
  • The Fastly Next-Gen WAF was installed in minutes, allowing the security team to uncover application errors and address root causes more efficiently and effectively.
  • OFX established a baseline for their normal authentication traffic and created custom thresholds to alert and block malicious authentication traffic aggressively whenever it deviates from normal behavior.

相关案例.

联系我们

欢迎与我们交流!

* Required
* Required
* Required
* Invalid email address
提交此表单,即表示您同意 IoT ONE 可以与您联系并分享洞察和营销信息。
不,谢谢,我不想收到来自 IoT ONE 的任何营销电子邮件。
提交

Thank you for your message!
We will contact you soon.