下载PDF
Zoopla's Application Security Enhancement with Rapid7 InsightAppSec
技术
- 应用基础设施与中间件 - 事件驱动型应用
- 网络安全和隐私 - 应用安全
适用行业
- 建筑物
- 国家安全与国防
适用功能
- 产品研发
- 质量保证
用例
- 实验自动化
- 篡改检测
服务
- 测试与认证
- 培训
挑战
Zoopla 是一家总部位于伦敦的房地产门户网站，在维护其应用程序的安全性方面面临着重大挑战。其旗舰房地产网站和应用程序每月的访问量超过 6000 万次，该公司必须确保用户的最大安全。该公司的安全团队由应用程序安全工程师 Alikhan Uzakov 领导，负责指导数百名 Zoopla 开发人员完成应用程序安全测试过程。这包括进行培训并帮助开发人员将安全工具嵌入到他们的流程中，以确保新功能和产品在发布之前进行安全测试。然而，由于只有三名员工，安全团队发现为大量开发人员提供支持具有挑战性。
关于客户
Zoopla 是一家领先的房地产门户网站，总部位于英国伦敦。该公司为房地产买家、卖家和租户提供服务，提供房地产研究以及销售和租赁列表，以帮助用户做出明智的决定。 Zoopla 列出了英国和荷兰超过 100 万处房产，其旗舰房产网站和应用程序每月的访问量超过 6000 万次。该公司与数百家应用程序开发商合作，通过创建自己的网站并为他们提供培训来帮助房地产经纪人启动业务。 Zoopla 不仅仅是一个网站；它是一家综合性企业，为广泛的房地产专业人士提供支持。
解决方案
为了应对这一挑战，Zoopla 转向了 Rapid7 InsightAppSec，这是一种提供动态应用程序安全测试 (DAST) 的工具。 Uzakov 以前曾使用过该工具，但他对其进行了试验，以确保它满足 Zoopla 的特定要求。根据价格、功能和供应商提供的支持级别测试、评估和比较几种应用安全工具后，他们选择了 InsightAppSec。该工具允许 Zoopla 将安全测试作为开发过程的一部分进行自动化，评估现代 Web 应用程序和 API，减少误报和遗漏的漏洞，通过丰富的报告和集成进行快速修复，并通过评估应用程序组合的安全性轻松扩展，无论其大小。 InsightAppSec 还使他们能够扫描 Web 应用程序以识别 SQL 注入、XSS 和 CSRF 等漏洞。
运营影响
数量效益
相关案例.
Case Study
Energy Saving & Power Monitoring System
Recently a university in Taiwan was experiencing dramatic power usage increases due to its growing number of campus buildings and students. Aiming to analyze their power consumption and increase their power efficiency across 52 buildings, the university wanted to build a power management system utilizing web-based hardware and software. With these goals in mind, they contacted Advantech to help them develop their system and provide them with the means to save energy in the years to come.
Case Study
Intelligent Building Automation System and Energy Saving Solution
One of the most difficult problems facing the world is conserving energy in buildings. However, it is not easy to have a cost-effective solution to reduce energy usage in a building. One solution for saving energy is to implement an intelligent building automation system (BAS) which can be controlled according to its schedule. In Indonesia a large university with a five floor building and 22 classrooms wanted to save the amount of energy being used.
Case Study
Powering Smart Home Automation solutions with IoT for Energy conservation
Many industry leaders that offer Smart Energy Management products & solutions face challenges including:How to build a scalable platform that can automatically scale-up to on-board ‘n’ number of Smart home devicesData security, solution availability, and reliability are the other critical factors to deal withHow to create a robust common IoT platform that handles any kind of smart devicesHow to enable data management capabilities that would help in intelligent decision-making
Case Study
Commercial Building Automation Boosts Energy Efficiency
One of the challenges to building automation is the multitude of non-interoperable communications protocols that have evolved over the years. Buildings have several islands of automation. Bridging the islands of different automation without losing the considerable investment in each specialized control network is the main focus in this solution.
Case Study
Protecting a Stadium from Hazardous Materials Using IoT2cell's Mobility Platform
There was a need for higher security at the AT&T Stadium during the NFL draft. There was a need to ensure that nuclear radiation material was not smuggled inside the stadium. Hazmat materials could often be missed in a standard checkpoint when gaining entry into a stadium.
