Search results

Discover how micro-segmentation can help you reduce the surface of your network attacks and protect your organization from cyber-attacks. Webinars CTO Round Table: Fighting Ransomware with Micro-segmentation In the past few months, we’ve witnessed a steep rise in ransomware attacks targeting anyone from small companies to large, global enterprises. It seems like no organization is immune to ransomware. So how do you protect your network from such attacks? Join our discussion with AlgoSec CTO Prof. Avishai Wool and Guardicore CTO Ariel Zeitlin, and discover how micro-segmentation can help you reduce your network attack surface and protect your organization from cyber-attacks. Learn: Why micro-segmentation is critical to fighting ransomware and other cyber threats. Common pitfalls organizations face when implementing a micro-segmentation project How to discover applications and their connectivity requirements across complex network environments. How to write micro-segmentation filtering policy within and outside the data center November 17, 2020 Ariel Zeitlin CTO Guardicore Prof. Avishai Wool CTO & Co Founder AlgoSec Relevant resources Defining & Enforcing a Micro-segmentation Strategy Read Document Building a Blueprint for a Successful Micro-segmentation Implementation Keep Reading Ransomware Attack: Best practices to help organizations proactively prevent, contain and respond Keep Reading Choose a better way to manage your network Choose a better way to manage your network Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Continued growth underscores AlgoSec’s commitment to innovation and leadership in application-centric security to drive business value AlgoSec Achieves Strong Growth in 2024, Expands Customer Partnerships and Services Driven by Application-Centric Vision Continued growth underscores AlgoSec’s commitment to innovation and leadership in application-centric security to drive business value March 20, 2025 Speak to one of our experts RIDGEFIELD PARK, NJ, March 20, 2025 – AlgoSec , a global cybersecurity leader, today announced a double-digit year-on-year annual recurring revenue growth and a gross dollar retention of over 90%. The company has consistently generated positive cash flow and remained debt-free since it was founded in 2004. The company also saw an increase in multiple industry verticals, including Finance, Government, Telecommunications, Healthcare, Retail, Utilities and Transportation. These accomplishments are a testament to AlgoSec’s strong market position, customer satisfaction and application-centric approach to cybersecurity across the hybrid environment. To effectively execute and meet the needs of the world’s largest organizations, AlgoSec has the highest number of employees and 70% more research and development engineers than any competitor. According to Gartner , the fast-evolving threat environment is changing the cybersecurity industry, as a result of increases in generative AI, cloud adoption and regulations. As the cybersecurity industry continues to evolve and the needs of businesses change, AlgoSec remains committed to investing heavily in product innovation and development. Stemming directly from these market shifts, AlgoSec recently launched the AlgoSec Horizon Platform , the industry's first application-centric security management platform for the hybrid network environment. The AlgoSec Horizon platform serves as a single source for visibility into security and compliance issues across the hybrid network environment to automatically discover and identify their business applications across multi-clouds, and remediate risks more effectively. “As a company led by its founders and focused on its customers, AlgoSec’s consistent growth showcases our ability to empower the most complex organizations to securely accelerate their application delivery,” said Chris Thomas , Chief Revenue Officer at AlgoSec. “Heading into our 21st year of business, we look forward to pushing these efforts even further to help organizations future-proof their network security through our unique application-centric approach.” Additional 2024 AlgoSec milestones and company accomplishments include: Winning two Cisco Partnership Awards , recognizing the value for securing application connectivity across hybrid networks Being recognized with Established Vendor Designation in 2024 Gartner® Peer Insights™ Voice of the Customer for Network Automation Platforms Listing as a 2024 SC Awards Finalist: Best Enterprise Security Solution for AlgoSec’s application-centric platform Launching the company’s AI-powered security platform to securely manage application-centric connectivity and remediate risk in real time Ranking as the #1 network security management solution in the market by real users on Gartner Peer Insights, G2 and Peerspot For more information on AlgoSec’s vision for 2025 and beyond, and to discover why over 2,200 of the world's most complex organizations trust AlgoSec to help secure their most critical workloads, visit www.algosec.com . About AlgoSec AlgoSec, a global cybersecurity leader, empowers organizations to securely accelerate application delivery up to 10 times faster by automating application connectivity and security policy across the hybrid network environment. With two decades of expertise securing hybrid networks, over 2,200 of the world's most complex organizations trust AlgoSec to help secure their most critical workloads. AlgoSec Horizon platform utilizes advanced AI capabilities, enabling users to automatically discover and identify their business applications across multi-clouds, and remediate risks more effectively. It serves as a single source for visibility into security and compliance issues across the hybrid network environment, to ensure ongoing adherence to internet security standards, industry, and internal regulations. Additionally, organizations can leverage intelligent change automation to streamline security change processes, thus improving security and agility. Learn how AlgoSec enables application owners, information security experts, SecOps and cloud security teams to deploy business applications faster while maintaining security at www.algosec.com . MEDIA CONTACT: Michelle Williams Alloy, on behalf of AlgoSec [email protected] 855-300-8209

A Comprehensive Cloud Security Checklist for Your Cloud Environment There’s a lot to consider when securing your cloud environment.... Cloud Security Cloud Security Checklist: Key Steps and Best Practices Rony Moshkovich 2 min read Rony Moshkovich Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 7/21/23 Published A Comprehensive Cloud Security Checklist for Your Cloud Environment There’s a lot to consider when securing your cloud environment. Threats range from malware to malicious attacks, and everything in between. With so many threats, a checklist of cloud security best practices will save you time. First we’ll get a grounding in the top cloud security risks and some key considerations. The Top 5 Security Risks in Cloud Computing Understanding the risks involved in cloud computing is a key first step. The top 5 security risks in cloud computing are: 1. Limited visibility Less visibility means less control. Less control could lead to unauthorized practices going unnoticed. 2. Malware Malware is malicious software, including viruses, ransomware, spyware, and others. 3. Data breaches Breaches can lead to financial losses due to regulatory fines and compensation. They may also cause reputational damage. 4. Data loss The consequences of data loss can be severe, especially it includes customer information. 5. Inadequate cloud security controls If cloud security measures aren’t comprehensive, they can leave you vulnerable to cyberattacks. Key Cloud Security Checklist Considerations 1. Managing User Access and Privileges Properly managing user access and privileges is a critical aspect of cloud infrastructure. Strong access controls mean only the right people can access sensitive data. 2. Preventing Unauthorized Access Implementing stringent security measures, such as firewalls, helps fortify your environment. 3. Encrypting Cloud-Based Data Assets Encryption ensures that data is unreadable to unauthorized parties. 4. Ensuring Compliance Compliance with industry regulations and data protection standards is crucial. 5. Preventing Data Loss Regularly backing up your data helps reduce the impact of unforeseen incidents. 6. Monitoring for Attacks Security monitoring tools can proactively identify suspicious activities, and respond quickly. Cloud Security Checklist Understand cloud security risks Establish a shared responsibility agreement with your cloud services provider (CSP) Establish cloud data protection policies Set identity and access management rules Set data-sharing restrictions Encrypt sensitive data Employ a comprehensive data backup and recovery plan Use malware protection Create an update and patching schedule Regularly assess cloud security Set up security monitoring and logging Adjust cloud security policies as new issues emerge Let’s take a look at these in more detail. Full Cloud Security Checklist 1. Understand Cloud Security Risks 1a. Identify Sensitive Information First, identify all your sensitive information. This data could range from customer information to patents, designs, and trade secrets. 1b. Understand Data Access and Sharing Use access control measures, like role-based access control (RBAC), to manage data access. You should also understand and control how data is shared. One idea is to use data loss prevention (DLP) tools to prevent unauthorized data transfers. 1c. Explore Shadow IT Shadow IT refers to using IT tools and services without your company’s approval. While these tools can be more productive or convenient, they can pose security risks. 2. Establish a Shared Responsibility Agreement with Your Cloud Service Provider (CSP) Understanding the shared responsibility model in cloud security is essential. There are various models – IaaS, PaaS, or SaaS. Common CSPs include Microsoft Azure and AWS. 2a. Establish Visibility and Control It’s important to establish strong visibility into your operations and endpoints. This includes understanding user activities, resource usage, and security events. Using security tools gives you a centralized view of your secure cloud environment. You can even enable real-time monitoring and prompt responses to suspicious activities. Cloud Access Security Brokers (CASBs) or cloud-native security tools can be useful here. 2b. Ensure Compliance Compliance with relevant laws and regulations is fundamental. This could range from data protection laws to industry-specific regulations. 2c. Incident Management Despite your best efforts, security incidents can still occur. Having an incident response plan is a key element in managing the impact of any security events. This plan should tell team members how to respond to an incident. 3. Establish Cloud Data Protection Policies Create clear policies around data protection in the cloud . These should cover areas such as data classification, encryption, and access control. These policies should align with your organizational objectives and comply with relevant regulations. 3a. Data Classification You should categorize data based on its sensitivity and potential impact if breached. Typical classifications include public, internal, confidential, and restricted data. 3b. Data Encryption Encryption protects your data in the cloud and on-premises. It involves converting your data so it can only be read by those who possess the decryption key. Your policy should mandate the use of strong encryption for sensitive data. 3c. Access Control Each user should only have the access necessary to perform their job function and no more. Policies should include password policies and changes of workloads. 4. Set Identity and Access Management Rules 4a. User Identity Management Identity and Access Management tools ensure only the right people access your data. Using IAM rules is critical to controlling who has access to your cloud resources. These rules should be regularly updated. 4b. 2-Factor and Multi-Factor Authentication Two-factor authentication (2FA) and multi-factor authentication (MFA) are useful tools. You reduce the risk by implementing 2FA or MFA, even if a password is compromised. 5. Set Data Sharing Restrictions 5a. Define Data Sharing Policies Define clear data-sharing permissions. These policies should align with the principles of least privilege and need-to-know basis. 5b. Implement Data Loss Prevention (DLP) Measures Data Loss Prevention (DLP) tools can help enforce data-sharing policies. These tools monitor and control data movements in your cloud environment. 5c. Audit and Review Data Sharing Activities Regularly review and audit your data-sharing activities to ensure compliance. Audits help identify any inappropriate data sharing and provide insights for improvement. 6. Encrypt Sensitive Data Data encryption plays a pivotal role in safeguarding your sensitive information. It involves converting your data into a coded form that can only be read after it’s been decrypted. 6a. Protect Data at Rest This involves transforming data into a scrambled form while it’s in storage. It ensures that even if your storage is compromised, the data remains unintelligible. 6b. Data Encryption in Transit This ensures that your sensitive data remains secure while it’s being moved. This could be across the internet, over a network, or between components in a system. 6c. Key Management Managing your encryption keys is just as important as encrypting the data itself. Keys should be stored securely and rotated regularly. Additionally, consider using hardware security modules (HSMs) for key storage. 6d. Choose Strong Encryption Algorithms The strength of your encryption depends significantly on the algorithms you use. Choose well-established encryption algorithms. Advanced Encryption Standard (AES) or RSA are solid algorithms. 7. Employ a Comprehensive Data Backup and Recovery Plan 7a. Establish a Regular Backup Schedule Install a regular backup schedule that fits your organization’s needs . The frequency of backups may depend on how often your data changes. 7b. Choose Suitable Backup Methods You can choose from backup methods such as snapshots, replication, or traditional backups. Each method has its own benefits and limitations. 7c. Implement a Data Recovery Strategy In addition to backing up your data, you need a solid strategy for restoring that data if a loss occurs. This includes determining recovery objectives. 7d. Test Your Backup and Recovery Plan Regular testing is crucial to ensuring your backup and recovery plan works. Test different scenarios, such as recovering a single file or a whole system. 7e. Secure Your Backups Backups can become cybercriminals’ targets, so they also need to be secured. This includes using encryption to protect backup data and implementing access controls. 8. Use Malware Protection Implementing robust malware protection measures is pivotal in data security. It’s important to maintain up-to-date malware protection and routinely scan your systems. 8a. Deploy Antimalware Software Deploy antimalware software across your cloud environment. This software can detect, quarantine, and eliminate malware threats. Ensure the software you select can protect against a wide range of malware. 8b. Regularly Update Malware Definitions Anti-malware relies on malware definitions. However, cybercriminals continuously create new malware variants, so these definitions become outdated quickly. Ensure your software is set to automatically update. 8c. Conduct Regular Malware Scans Schedule regular malware scans to identify and mitigate threats promptly. This includes full system scans and real-time scanning. 8d. Implement a Malware Response Plan Develop a comprehensive malware response plan to ensure you can address any threats. Train your staff on this plan to respond efficiently during a malware attack. 8e. Monitor for Anomalous Activity Continuously monitor your systems for any anomalous activity. Early detection can significantly reduce the potential damage caused by malware. 9. Create an Update and Patching Schedule 9a. Develop a Regular Patching Schedule Develop a consistent schedule for applying patches and updates to your cloud applications. For high-risk vulnerabilities, consider implementing patches as soon as they become available. 9b. Maintain an Inventory of Software and Systems You need an accurate inventory of all software and systems to manage updates and patches. This inventory should include the system version, last update, and any known vulnerabilities. 9c. Automation Where Possible Automating the patching process can help ensure that updates are applied consistently. Many cloud service providers offer tools or services that can automate patch management. 9d. Test Patches Before Deployment Test updates in a controlled environment to ensure work as intended. This is especially important for patches to critical systems. 9e. Stay Informed About New Vulnerabilities and Patches Keep abreast of new vulnerabilities and patches related to your software and systems. Being aware of the latest threats and solutions can help you respond faster. 9f. Update Security Tools and Configurations Don’t forget to update your cloud security tools and configurations regularly. As your cloud environment evolves, your security needs may change. 10. Regularly Assess Cloud Security 10a. Set up cloud security assessments and audits Establish a consistent schedule for conducting cybersecurity assessments and security audits. Audits are necessary to confirm that your security responsibilities align with your policies. These should examine configurations, security controls, data protection and incident response plans. 10b. Conduct Penetration Testing Penetration testing is a proactive approach to identifying vulnerabilities in your cloud environment. These are designed to uncover potential weaknesses before malicious actors do. 10c. Perform Risk Assessments These assessments should cover a variety of technical, procedural, and human risks. Use risk assessment results to prioritize your security efforts. 10d. Address Assessment Findings After conducting an assessment or audit, review the findings and take appropriate action. It’s essential to communicate any changes effectively to all relevant personnel. 10f. Maintain Documentation Keep thorough documentation of each assessment or audit. Include the scope, process, findings, and actions taken in response. 11. Set Up Security Monitoring and Logging 11a. Intrusion Detection Establish intrusion detection systems (IDS) to monitor your cloud environment. IDSs operate by recognizing patterns or anomalies that could indicate unauthorized intrusions. 11b. Network Firewall Firewalls are key components of network security. They serve as a barrier between secure internal network traffic and external networks. 11c. Security Logging Implement extensive security logging across your cloud environment. Logs record the events that occur within your systems. 11d. Automate Security Alerts Consider automating security alerts based on triggering events or anomalies in your logs. Automated alerts can ensure that your security team responds promptly. 11e. Implement Information Security and Event Management (SIEM) System A Security Information and Event Management (SIEM) system can your cloud data. It can help identify patterns, security breaches, and generate alerts. It will give a holistic view of your security posture. 11f. Regular Review and Maintenance Regularly review your monitoring and logging practices to ensure they remain effective. as your cloud environment and the threat landscape evolve. 12. Adjust Cloud Security Policies as New Issues Emerge 12a. Regular Policy Reviews Establish a schedule for regular review of your cloud security policies. Regular inspections allow for timely updates to keep your policies effective and relevant. 12b. Reactive Policy Adjustments In response to emerging threats or incidents, it may be necessary to adjust on an as-needed basis. Reactive adjustments can help you respond to changes in the risk environment. 12c. Proactive Policy Adjustments Proactive policy adjustments involve anticipating future changes and modifying your policies accordingly. 12d. Stakeholder Engagement Engage relevant stakeholders in the policy review and adjustment process. This can include IT staff, security personnel, management, and even end-users. Different perspectives can provide valuable insights. 12e. Training and Communication It’s essential to communicate changes whenever you adjust your cloud security policies. Provide training if necessary to ensure everyone understands the updated policies. 12f. Documentation and Compliance Document any policy adjustments and ensure they are in line with regulatory requirements. Updated documentation can serve as a reference for future reviews and adjustments. Use a Cloud Security Checklist to Protect Your Data Today Cloud security is a process, and using a checklist can help manage risks. Companies like Prevasio specialize in managing cloud security risks and misconfigurations, providing protection and ensuring compliance. Secure your cloud environment today and keep your data protected against threats. Schedule a demo Related Articles Q1 at AlgoSec: What innovations and milestones defined our start to 2026? AlgoSec Reviews Mar 19, 2023 · 2 min read 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call

Explore best practices for security and compliance in financial institutions, ensuring robust protection and adherence to regulations amid digital transformation. Financial Institutions: Best Practices for Security & Compliance in the Era of Digital Transformation Overview Financial institutions face two major network security related challenges while working to serve their customers: the constant demand to improve in order to successfully compete in the market and regulatory compliance. Yet, when it comes to security, the InfoSec team often uses slow, manual (and error prone) processes to make the necessary network security changes – thereby delaying the release of a new competitive application or feature to market. To overcome these challenges, financial institutions must implement a network security policy management solution that will: Process the frequent security policy change requests automatically, with zero touch Simplify and automate regulatory compliance management Document all changes, providing a full audit trail Want to find out more? Download our whitepaper: Financial Institutions: Best Practices for Security and Compliance in the Era of Transformation It’s time to discover how automation can help transform your InfoSec team from business inhibitor to business enabler. Schedule a Demo Introduction In order to maintain a competitive advantage, information security teams at financial institutions must be able to support business transformation initiatives and deploy new applications or updated functionality to market quickly and securely. Most IT departments use automation tools to assist them with many aspects of their work – including managing software changes or provisioning storage. Automation allows them to support the fast pace required, ensure quality and maintain compliance with industry regulations. However, when it comes to security, oftentimes the InfoSec team still makes the necessary network security changes using manual processes. This is mostly due to the perceived complexity of the segmented network infrastructure; the large number of firewalls and network security devices (from multiple vendors) that are typically deployed across a financial institute’s network, as well as the extensive compliance requirements to which financial institutions are subject. As a result, the InfoSec team is often perceived as a bottleneck to progress – holding back the release of a new competitive application or feature to market. This white paper will discuss the challenges facing InfoSec teams today. It will then explain how a network security management solution delivers critical automation that will help transform the InfoSec team from a business inhibitor to a business enabler. Schedule a Demo Network security challenges for financial institutions Financial institutions face two key network security related challenges in their mission to serve their customers: regulatory compliance and a continual demand for changes in order to compete in the market. The number of regulations that financial institutions are required to uphold has significantly increased over the years. They include GLBA, GDPR, BASEL II, SOX, Dodd-Frank, PCI-DSS and many others. While these regulations aim to provide best practices that will help both the financial institutions and their customers, they require considerable effort to maintain, particularly with regards to network security. The second challenge that impacts network security in financial services, is the constant demand for changes. In recent years, the demand for innovation coupled with competition from agile and disruptive fintech companies is putting considerable pressure on financial institutions. As a result, financial institutions are constantly seeking ways to improve the way they interact with their customers while becoming more efficient. This means that there is now an ever-present need for change in a typically conservative industry that has previously been slow and reluctant to embrace change! Managing network security changes efficiently and effectively across today’s complex network environments requires automation. Yet, while IT organizations have embraced automation to handle many of its tasks, the InfoSec team has not. In the following section, we will discuss ways to utilize automation to manage security changes and manage the ever-increasing demands of industry regulations. Schedule a Demo Automated network security policy management To tackle these challenges, the InfoSec team needs automation to effectively manage the demands of regulatory compliance as well as keep up with the volume of network security policy changes. Managing compliance with industry regulations As part of compliance requirements most regulations require full visibility into the security posture, regular audits, and documentation of any changes. Visibility of the security posture: The first step to achieving visibility is to identify all the applications that support customer transactions and manage customer information. Next they should be classified based on the relevant regulations, such as PCI for applications that manage cardholder information. There are tools that can handle this process automatically, including the discovery process, which save considerable time. Moreover, automation tools can help document the entire environment, including the network security device configurations and security policies – which is a key part of regulatory compliance. In addition to supporting compliance requirements, this visibility and transparency will expose any gaps and risks in your network security, and thus help in making your network secure. Streamlined audits: Whether internal or external, audits eat up considerable resources. The InfoSec team currently needs to spend significant time and effort generating reports that document their security posture and prove compliance with every regulation – time that could be better spent focusing on securing the network or responding to business requests. Automation can handle all these processes, and generate self-documenting, audit-ready reports out of the box. Documenting compliance: Most network security management solutions review all changes during design and deployment to ensure that they comply with the industry regulations. As part of this process they document and provide a full audit trail of the change, thereby automating the requirement for change documentation. Managing the constant barrage of change requests An automation solution is paramount to tackling the frequent change requests that are typically required in the financial industry. An automation solution will enable the InfoSec team to focus on the impact and risk of the change as well as ensure that all changes are necessary (typically around 30% of change requests are unnecessary). An automation solution must: Ensure that the network security policy change request will not breach the compliance posture Automatically map the network route for any planned changes and identify the firewall, routers and switches along that route that need to be changed Assess all the risks of a security change. These include regulatory compliance risks as well as internal risks Understand the details of each firewall rule change request and determine whether a change is really needed, whether a change to an existing rule will be sufficient or if there is a need to create a new rule as part of the change request. This process will reduce the overall number of rules and help optimize the security ruleset Can automatically deploy changes directly onto firewalls Schedule a Demo Summary Financial institutions are constantly seeking to better serve their customers and maintain a competitive edge through new technology innovations. Yet often these organizations fall behind on delivering these new innovations into production. Their network and security operations team are hampered by manual and error-prone security change management processes coupled with the ever-increasing demands of industry regulations, which impact time-to-market. Automated network security management solutions help streamline the auditing process, ensure continuous compliance, as well as significantly simplify and speed up the process of managing network security changes. Schedule a Demo About AlgoSec The leading provider of business-driven security management solutions, AlgoSec helps the world’s largest organizations align security with their business processes. With AlgoSec, users can discover, map and migrate business application connectivity, proactively analyze risk from the business perspective, tie cyber-attacks to business processes and intelligently automate network security changes with zero touch – across their cloud, SDN and on-premise networks. Over 1,800 enterprises, including twenty Fortune 50 companies, have utilized AlgoSec’s solutions to make their organizations more agile, more secure and more compliant – all the time. Since its inception, AlgoSec has provided the industry’s only money-back guarantee. Let's start your journey to our business-centric network security. Schedule a Demo Select a size Overview Introduction Network security challenges for financial institutions Automated network security policy management Summary About AlgoSec Get the latest insights from the experts Choose a better way to manage your network

Learn how to secure your hybrid cloud environment with best practices and strategies in this article Safeguard your sensitive data from potential threats Hybrid cloud security management: Best practices + solution Select a size Which network Can AlgoSec be used for continuous compliance monitoring? Yes, AlgoSec supports continuous compliance monitoring. As organizations adapt their security policies to meet emerging threats and address new vulnerabilities, they must constantly verify these changes against the compliance frameworks they subscribe to. AlgoSec can generate risk assessment reports and conduct internal audits on-demand, allowing compliance officers to monitor compliance performance in real-time. Security professionals can also use AlgoSec to preview and simulate proposed changes to the organization’s security policies. This gives compliance officers a valuable degree of lead-time before planned changes impact regulatory guidelines and allows for continuous real-time monitoring. What Is hybrid cloud security? What are the 2 other categories of cloud security? Security benefits of a hybrid cloud solution What are the risks in hybrid cloud security? Components of hybrid cloud security Hybrid cloud security infrastructure Hybrid cloud security best practices AlgoSec and hybrid cloud security Get the latest insights from the experts Learn how AlgoSec can help you pass PCI-DSS Audits and ensure continuous Solution Overview Use these six best practices to simplify compliance and risk Case study See how this customer improved compliance readiness and risk Case study Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

The aim of this post is to provide a very high-level illustration of the DNS Tunneling method used in the SolarWinds supply chain attack.... Cloud Security DNS Tunneling In The SolarWinds Supply Chain Attack Rony Moshkovich 2 min read Rony Moshkovich Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 12/23/20 Published The aim of this post is to provide a very high-level illustration of the DNS Tunneling method used in the SolarWinds supply chain attack . An Attacker compromises SolarWinds company and trojanizes a DLL that belongs to its software. Some of the customers receive the malicious DLL as an update for the SolarWinds Orion software. “Corporation XYZ” receives the malicious and digitally signed DLL via update. SolarWinds Orion software loads the malicious DLL as a plugin. Once activated, the DLL reads a local domain name “local.corp-xyz.com” (a fictious name). The malware encrypts the local domain name and adds it to a long domain name. The long domain name is queried with a DNS server (can be tapped by a passive DNS sensor). The recursive DNS server is not authorized to resolve avsvmcloud[.]com, so it forwards the request. An attacker-controlled authoritative DNS server resolves the request with a wildcard A record. The Attacker checks the victim’s name, then adds a CNAME record for the victim’s domain name. The new CNAME record resolves the long domain name into an IP of an HTTP-based C2 server. The malicious DLL downloads and executes the 2nd stage malware (TearDrop, Cobalt Strike Beacon). A Threat Researcher accesses the passive DNS (pDNS) records. One of the long domain names from the pDNS records is decrypted back into “local.corp-xyz.com”. The Researcher deducts that the decrypted local domain name belongs to “Corporation XYZ”. Schedule a demo Related Articles Q1 at AlgoSec: What innovations and milestones defined our start to 2026? AlgoSec Reviews Mar 19, 2023 · 2 min read 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. Leading payment solutions company credits AlgoSec for increasing security and compliance Organization Payment Solutions Industry Financial Services Headquarters Download case study Share Customer
success stories "Leading fintech company rapidly improves security and compliance with AlgoSec jumpstart program" Background The company is one of the largest payment solutions providers, with offices processing more than 28 billion transactions worldwide. The company services 800,000 merchant outlets that generate $120 billion in processing volume. Its businesses include credit card processing, merchant acquisition and issuance of bank credit cards. The company grew to its enormous size through innovation and acquisition. It has introduced modern technology into the payments industry and has acquired many innovative companies over the last three decades. Challenges Today, the company operates 10 data centers with varying security architectures and firewall equipment from different vendors. The security staff is currently in the process of a cross-company firewall consolidation that will take several years to complete. The company is automating its change management of firewall rules to cut down on the time and effort spent on researching and implementing rules to keep up with its fast growth. It deploys rule changes during tight, scheduled “push windows” and conducts compliance reviews twice per year. The firewall change process is highly complex with many steps: Request Design Peer Review Management Approval Implementation Validation Success for the security team is all about time. They seek to automate the process by reducing time spent on: Research and writing rules Peer reviews Staging Security peering after staging Firewall push window requirements Quarterly firewall ruleset reviews as part of compliance objectives Solution The security team acquired AlgoSec Horizon Security Analyzer (AFA) and deployed it at two of its data centers in Arizona and Colorado. In both locations, the company is in the process of firewall migration to consolidate on one vendor. However, they need to add firewall clusters one at a time after each migration instead of all at once. The company took advantage of AlgoSec’s Jumpstart Program that delivers the benefits of AlgoSec Horizon Security Analyzer in conjunction with other AlgoSec solutions quickly. With Jumpstart, the company is quickly able to: Automate the discovery and mapping of enterprise applications Automate the change management processes Adopt the new processes across the company Realize rapid ROI The company’s lead security infrastructure consultant proclaimed, “AlgoSec customized their Jumpstart Program just for us. Their people are engaged, personable, skilled and highly efficient. They became part of our team dedicated to our success.” In addition to getting Horizon Security Analyzer up and running quickly and delivering its benefits, the Jumpstart team’s AFA deployment immediately identified network security gaps and helped the company close them, making them more secure and compliant. Results AlgoSec Horizon Security Analyzer is achieving all the goals of the security team. Time for policy writing reduced from 90 hours to 15 hours – 83% less Cut the total process time by half, enabling the security team to keep up with the barrage of change requests. Reduced the admin overhead from 30 to 4 – 87% less “Automation is definitely the way to go,” declared their security consultant. “We can now stay on top of the process even while we migrate our firewalls. We are looking for more from AlgoSec.” The company is now in the process of implementing AlgoSec Horizon FireFlow (AFF) to enhance the existing change management system with intelligent network and security automation. AlgoSec Horizon FireFlow enforces compliance and automatically documents the entire change-management lifecycle. Some of the features include: Processing of firewall changes with zero-touch automation Elimination of mistakes and rework, and improvement of accountability for change requests Proactive assessment of the impact of network changes to ensure security and continuous compliance Automation of the rule–recertification processes Schedule time with one of our experts

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. TECHCOMBANK SAVES TIME AND RESOURCES WITH SIMPLIFIED FIREWALL POLICY MANAGEMENT Organization Techcombank Industry Financial Services Headquarters Hanoi, Vietnam Download case study Share Customer
success stories "AlgoSec enables us to identify ways to consolidate and optimize rules and perform deep risk analysis and automate workflows in ways that other products cannot match" Background Techcombank is one of the largest joint stock commercial banks in Vietnam. With more than 300 branches and 7,000 staff, Techcombank provides deposit products, loans, leasing, cash management and other services to more than 3.3 million individual customers and 45,000 corporate clients. Challenge Tens of firewall devices and hundreds of routers and switches protect the financial data of Techcombank’s customers, as well as the operations of hundreds of branches throughout Vietnam. As a bank, all security policies and firewall configurations must comply with PCI-DSS and ISO27001 standards. Ensuring compliance, however, created ongoing headaches for the IT security team. “With equipment from many different vendors, even simple policy audits were challenging tasks,” says Mr. Van Anh Tuan, CSO of Techcombank. “As a result of the diversity of products and lack of visibility, it was difficult for us to monitor changes to rule configurations in real time in order to maintain internal security compliance as well as PCI compliance.” “Cleaning up and fine tuning firewall policies was a particularly complex process, which made it difficult to respond quickly to the changing needs of our business applications,” adds Mr. Tuan. “We wanted a way to optimize and consolidate rules across all of our firewalls, regardless of manufacturer, and completely automate the end-to-end workflow for firewall rule change management.” In addition, Techcombank sought a solution that would simplify the process of conducting risk analysis, evaluating PCI compliance and identifying the necessary steps for remediation. Solution Following an in-depth competitive evaluation, Techcombank selected AlgoSec’s Security Management solution. “AlgoSec met many of our key requirements, better than its competitors in our evaluation,” Mr. Tuan notes. Techcombank particularly liked AlgoSec’s superior security policy analysis and ability to make actionable recommendations with a high level of accuracy. “AlgoSec will enable us to identify ways to consolidate and optimize rules, perform deep risk analysis, automate workflows and ensure compliance in ways that other products cannot match,” says Mr. Tuan. Techcombank’s IT team wants to be able to quickly identify security policy risks and see what specific steps they need to take for remediation. The bank uses AlgoSec to identify overly permissive firewall rules based on actual use as well as duplicate, unused and expired rules and objects. This information gives Techcombank the data they need to close off potential access points and help prevent attacks. AlgoSec also provides clear, detailed recommendations on how to best reorder rules for optimal firewall performance. In addition, AlgoSec validates firewall policy and rules against regulations such as PCI, as well as industry best practices and customized corporate policies to uncover and prioritize risks and track trends over time. For Mr. Tuan, one of the most valuable benefits of AlgoSec is the increased visibility into security policies across the full range of devices. “Now we can easily monitor our firewall operations and quickly detect any mistakes or non-compliant changes made. These operations used to be invisible to me.” Mr. Tuan comments. The AlgoSec deployment process went very smoothly for Techcombank. “Our team received training from AlgoSec and their partners here in Vietnam and we were fully utilizing the product almost immediately. Post-implementation support has addressed every issue quickly and enabled us to take advantage of all aspects of the product in order to optimize our firewall rules and improve our security posture even faster than we anticipated,” Mr. Tuan adds. Since implementation, AlgoSec has enabled Techcombank’s IT team to “greatly reduce our time and resources when complying with internal policies and PCI standards, and when monitoring changes in rules,” says Mr. Tuan. “We are very happy with the improved security and visibility provided by AlgoSec and will continue to use and exploit more AlgoSec features and add licenses,” he concluded. Schedule time with one of our experts

Avivi Siman-Tov, Director of Product Management at AlgoSec, discusses the benefits of network automation and takes us through a... Firewall Change Management Change automation: A step-by-step guide to network security policy change management Avivi Siman Tov 2 min read Avivi Siman Tov Short bio about author here Lorem ipsum dolor sit amet consectetur. Vitae donec tincidunt elementum quam laoreet duis sit enim. Duis mattis velit sit leo diam. Tags Share this article 10/21/21 Published Avivi Siman-Tov, Director of Product Management at AlgoSec, discusses the benefits of network automation and takes us through a step-by-step process to standardize change management In today’s fast-paced, data-driven environment, the only constant that businesses can bank on is change. For organizations to function and compete in the modern digital landscape, they need their data to be able to move freely and unobstructed through every branch of their business, unimpeded by security issues that require constant manual attention. The network is arguably the beating heart of an organization but keeping it ticking requires more maintenance than it once did, owing to constantly changing risk profiles and circumstances. That’s why a greater number of businesses are turning to change automation to bridge the gap between network alerts and the action that needs to be taken. Barriers to automation According to Gartner , organizations that can automate more than 70% of their network changes can reduce the number of outages by at least 50% and deliver services up to 50% faster. That’s because a lot of legacy solutions tend to take a reactive rather than proactive approach to dealing with security. There are multiple controls in place that simply don’t talk to each other. While most businesses get alerts from SIEM solutions and vulnerability scanners, responding to them turns into a full-time job, distracting your team from other important work they could be doing. Most organizations know that manual policy changes impact their productivity, but they’re afraid to take the leap to automation because of an ill-placed perception around security. Production environments in all organizations are maintained by different teams — for example, DevOps, maintenance, cloud security, IT, and more. Not all of these teams are educated to the same level in security matters, and some see it as a constraint that slows their work. This can lead to conflict between teams, which means that automation is not always welcome. Despite some resistance to change, enterprise-wide change automation makes it possible to transform network security policies without needing to reinvent the wheel or replace existing business processes. Automation and actionable intelligence are proven to enhance security and business agility without the stress often associated with misconfigurations caused by manual, ad-hoc processes. A typical network change workflow By elevating firewall change management from a manual, arduous task to a fully automated, zero-touch process, networks can become more agile and organizations far more adaptive. There are several steps that organizations need to take towards complete network security automation, from a simple change request through to implementation and validation. Let’s take a look at the most common steps in establishing automation for a simple change request. Step 1 – Request a network change Every change begins with a request. At this stage, you need to clarify who is asking for the amendment and why because sometimes the request is unnecessary or covered by an existing ruleset. Step 2 – Find relevant security devices Once this request is translated, the change automation platform will handle the request and implement the changes to hybrid networks. The administrator will be able to see which firewall and routing devices are involved and what impact the change will have. Step 3 – Plan change The change automation platform understands how to deal with different vendor-specific settings and how to implement the requests in a way that avoids creating any duplicates. Step 4 – Risk check The administrator will get a ‘ what if’ analysis, which checks the change for any risks. In this phase, the decision as to whether to allow the change and expose the network to the risk mentioned is in the hands of the network admin or security manager, depending on who is handling this phase. Step 5 – Push change to device Once planned changes are approved, the ‘magic’ happens. The change automation platform implements and pushes the changes to the desired devices automatically, either through APIs or directly to the device (CLI). This is a fully automated action that can be conducted on multiple devices, whether cloud-based or on-premises. The push can be done in a scheduled manner, in your maintenance window, or on-demand. Step 6 – Validate change At the end of each request, the solution will check that the request was successfully implemented across all devices. The solution also provides ongoing audits of the whole process, enabling easy checking of each stage. Step 7 – Documentation and logging Network security automation platforms can provide you with a full, automated audit trail. Documentation happens on the go, saving IT and security teams time and accelerating tedious network compliance management tasks. Put your trust in network automation While change management is complex stuff, the decision for your business is simple. It’s like the engine of an expensive car. Would you drive at high speeds if you didn’t have your brakes tested or a steering wheel to keep your course straight? Hopefully, the answer is no. With AlgoSec FireFlow , you can automate the security policy change process without introducing any element of risk, vulnerability, or compliance violation. AlgoSec FireFlow allows you to analyze every change before it is introduced, and validate successful changes as intended, all within your existing IT Service Management (ITSM) solutions . By putting your trust in us we can put you firmly in the driving seat with zero-touch change management and secure application deployment. For more information, or to arrange a demo , visit our website . Schedule a demo Related Articles Q1 at AlgoSec: What innovations and milestones defined our start to 2026? AlgoSec Reviews Mar 19, 2023 · 2 min read 2025 in review: What innovations and milestones defined AlgoSec’s transformative year in 2025? AlgoSec Reviews Mar 19, 2023 · 2 min read Navigating Compliance in the Cloud AlgoSec Cloud Mar 19, 2023 · 2 min read Speak to one of our experts Speak to one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Schedule a call

Webinars Beyond Connectivity: A Masterclass in Network Security with Meraki & AlgoSec Learn details of how to overcome common network security challenges, how to streamline your security management, and how to boost your security effectiveness with AlgoSec and Cisco Meraki’s enhanced integration. This webinar highlights real-world examples of organizations that have successfully implemented AlgoSec and Cisco Meraki solutions. January 18, 2024 Relevant resources Cisco Meraki – Visibility, Risk & Compliance Demo Watch Video 5 ways to enrich your Cisco security posture with AlgoSec Watch Video Choose a better way to manage your network Choose a better way to manage your network Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue

Explore Algosec's customer success stories to see how organizations worldwide improve security, compliance, and efficiency with our solutions. BM&FBOVESPA Invests In Security Policy Management To Improve Operational Efficiencies Organization BM&FBOVESPA Industry Financial Services Headquarters Sao Paulo, Brazil Download case study Share Customer
success stories "AlgoSec helps us maintain a problem-free environment. And because of operational efficiencies, the product paid for itself within the first year. With AlgoSec, we can do more with less" Leading Latin American Stock Exchange Maintains a Secure, Compliant Trading Environment AlgoSec Business Impact • Recouped investment in AlgoSec within the first year• Reduce rule review project from 1 month to 1 day• Helps maintain a secure, compliant environment• Frees up staff to focus on other crucial security tasks Background Headquartered in Sao Paulo, Brazil, BM&FBOVESPA is the largest stock exchange in Latin America. BM&FBOVESPA has a diversified and integrated trading model offering a complete custody system. Trading takes place in an exclusively electronic environment. The Exchange enables customers to trade equities, to hedge and to execute arbitrage, investment diversification, allocation and the leveraging of positions. Challenge To keep its systems and transactions secure, BM&FBOVESPA utilizes firewalls from several vendors. In total these firewalls have about 40,000 firewall rules, with another 5,000 added annually. Even with two full-time employeesfocused on maintaining firewall rules, the steady addition of rules and objects created clutter and consumed the firewall appliances’ CPU and memory. Therefore, BM&FBOVESPA realized that an automated solution for firewall policy management was the natural next step in the maturity of its information security processes. “Manually managing our firewall policies was difficultand time consuming. We needed a solution that supported a variety of different firewall vendors and could integrate and manage all policies in an automated manner,” said Wellington Vita, Information Security Manager of BM&FBOVESPA. Solution Following a recommendation from Compugraf, one of BM&FBOVESPA’s key security partners, Vita and his team evaluated AlgoSec’s Security Management solution. The proof of concept clearly showed the value of the solution and the ease and speed with which it could be deployed. The ability to integrate and manage devices from multiple vendors and provide visibility across the entire network was also important in BM&FBOVESPA’s decision to select AlgoSec. Results BM&FBOVESPA uses AlgoSec on a daily basis to manage its firewall policies. “AlgoSec is a great product which helps us maintain the core of our environment -the firewall policy. With AlgoSec we can easily identify unused rules and objects, as well as rules that were not compliant with our information security policy.” noted Vita. “While using AlgoSec, we also discovered a new benefit. AlgoSec enables our information security architects to understand how information flows between firewalls, which helps them significantly with their information security projects.” The gains in efficiency and productivity have dramatically reduced the time consumed by firewall policy management. “Because of operational efficiencies AlgoSec paid for itself in the first year,” said Vita. In addition to cutting the time needed to perform ongoing policy management, the solution enabled BM&FBOVESPA to meet deadlines that would previously have been unachievable. “A month ago, we had to review our incoming internet access rules in two days — and did. Without AlgoSec, it would have taken us at least a month to accomplish this task,” added Vita.“AlgoSec helps us maintain a problem-free environment. And we have been able to move members of our team who previously handled these maintenance jobs onto other tasks, so we can do more with less. I recommend AlgoSec to other companies — it will help them improve their firewall policy management processes,” concluded Vita. Schedule time with one of our experts

AlgoSec AutoDiscovery DS Download PDF Download PDF Add a Title Add a Title Add a Title Schedule time with one of our experts Work email* First name* Last name* Company* country* Select country... Short answer* By submitting this form, I accept AlgoSec's privacy policy Continue