下载PDF
Scaling Security Where Performance is Critical with Signal Sciences
技术
- 网络安全和隐私 - 云安全
适用功能
- 维护
用例
- 网络安全
服务
- 网络安全服务
挑战
Datadog 是云应用的监控和安全平台服务。数以千计的客户依靠 Datadog 来查看其 DevOps 堆栈中软件的指标和事件，例如云和安全监控、警报、日志等。该公司成立于 2010 年，通过接受现代工程和建筑实践的价值，迅速扩大规模，为全球客户提供服务。
随着组织的不断发展，Datadog 的安全团队知道，他们自己开发的应用程序安全工具无法以支持快速增长的客户群所需的速度扩展。下一步是采用 WAF，但 Datadog 需要在现代云架构中提供灵活性，支持快速 CI/CD 管道的代码更改和部署而无需进行大量调整，并且不会不必要地消耗安全、SRE 和开发团队的资源.
客户
数据狗
关于客户
Datadog 是针对云规模应用程序的可观察性服务，通过基于 SaaS 的数据分析平台提供对服务器、数据库、工具和服务的监控。
解决方案
唯一适用于现代应用的下一代 WAF
作为 DevOps 领域的领导者，Datadog 支持使用最新工具和最佳实践构建的云原生应用程序。他们的组织需要一种能够轻松适应其定制架构的安全解决方案：Signal Sciences 是唯一能够在填补空白的同时跟上他们步伐的供应商。
低 TCO，无需调整或维护
Datadog 通过每天推送代码数十次以满足客户需求，实现其价值主张——满足您所有应用程序监控需求的单一平台。安全团队知道，传统 WAF 很难理解和调整其应用程序的不断变化。
对应用程序或组织没有性能影响
对遗留 WAF 的主要抱怨之一是对整个组织的负面影响。无论是阻止合法用户访问站点、减慢应用程序速度，还是耗尽 DevOps 资源来对紧急情况进行分类，性能问题都是评估 WAF 的团队的首要任务。在部署 Signal Sciences 后，Datadog 报告了全面的零性能问题。
运营影响
相关案例.
Case Study
Enel Secures Italian Power Generation Network
Electric energy operators around the world are working to increase the reliability and cyber resiliency of their systems. This includes Enel, a global power company that manages and monitors the Italian power grid. This grid:• Serves 31 million customers• Has a net installed energy capacity exceeding 31 gigawatts• Includes more than 500 power generation plants,including hydroelectric, thermoelectric, and wind• Is managed and monitored by Enel 24/7/365• Is operated by Terna, the Italian Transmission System Operator (TSO)Enel is responsible for the availability of the grid’s underlying ICS and industrial network. It also manages Regional Control Centers and Interconnection Centers which connect with the TSO. The TSO manages the flow of energy to the grid plus controls and remotely regulates the power generation of power plants, increasing and decreasing power production as required. The complex system of interaction and cooperation between Enel and the TSO has strong security implications as well as operational and business challenges.
Case Study
Securing the Connected Car Ecosystem
In-vehicle communications and entertainment system hosts high-value or sensitive applications. API libraries facilitate communication and sharing of vehicle data. These API libraries are vulnerable to reverse engineering and tampering attacks and may even result in loss of passenger safety. Attackers can inject malware that may be able to migrate to other in-car networks such as the controller-area-network (CAN) bus which links to the vehicle’s critical systems. Software provided for dealers to interface with cars through the OBD2 port is vulnerable to reverse engineering and tampering attacks. Hackers may be able to abuse these tools to inject malicious code into the ECUs and CAN bus. Attackers can lift the cryptographic keys used, and use that to build their own rogue apps/software. Their cloned version of the original app/software may have altered functionality, and may intend to gain access to other in-car networks.
Case Study
Secure and Cloud-based Data Marketplace
The great promise of new connected concepts of industry like 'Industry 4.0' is their ability to deliver a historically unparalleled level of responsiveness and flexibility. While modern supply chains are already heavily integrated and designed to be fluid and fast moving, a large swathe of manufacturing still remains beholden to economies of scale, large production runs, and careful preplanning.The Industrial Internet of Things (IIoT) is set to change this by allowing small-batch or even custom manufacturing on a truly industrial scale. With machines whose functions are not set in stone, but flexible and determined by their operating software and with a new form of connectivity bringing industrial engineers, product manufacturers, and end users closer together than ever before. Ad-hoc adjustments to automotive parts, for example, during active product runs or the bespoke manufacturing of custom sneakers become very viable options indeed.Much of this remains a theoretical vision, but IUNO, the German national reference project for IT security in Industry 4.0 demonstrates the new capabilities in action with a secure technology data marketplace running a smart drinks mixer.
Case Study
Expedia Hosted by 2lemetry Through AWS
Expedia is committed to continuous innovation, technology, and platform improvements to create a great experience for its customers. The Expedia Worldwide Engineering (EWE) organization supports all websites under the Expedia brand. Expedia began using Amazon Web Services (AWS) in 2010 to launch Expedia Suggest Service (ESS), a typeahead suggestion service that helps customers enter travel, search, and location information correctly. According to the company’s metrics, an error page is the main reason for site abandonment. Expedia wanted global users to find what they were looking for quickly and without errors. At the time, Expedia operated all its services from data centers in Chandler, AZ. The engineering team realized that they had to run ESS in locations physically close to customers to enable a quick and responsive service with minimal network latency.
.png)
Case Study
OTA Software Updates for Smart Energy (gridX)
gridX has a requirement for over-the-air software updates for their gridBox devices and used the Yocto Project for their builds. The driver for the requirement was having the ability to quickly support new features, as well as deploying bug fixed and path known security vulnerabilities. New software updates with a US stick manually to all gridBox devices in the field would be prohibitively expensive and labor-intensive.
Case Study
Transformed IT Infrastructure Improves Business Agility
A global security, storage, and systems management software provider planned to demerge into two separate companies. To prepare, it undertook a major overhaul of its IT infrastructure and operations strategy. A key requirement: streamlining the Hosting Group, which handled compute, storage, and middleware operations. These functions had grown complex and had a wide geographic distribution. The company planned to bring them under closer in-house management.The company looked to increase its business agility so it could quickly and creatively respond to customer demands with improved internal collaboration and optimized go-to- market and IT service delivery capabilities. Modernizing IT functions, and making them more responsive, was critical to achieving these goals.
