Les lauréats des 2020 SC Awards honorés aux États-Unis – Serveur d’impression

Trust Award
Best Mobile Security Solution
Apricorn
Aegis Fortress L3

Here’s a riddle for you: When is data both at rest and in motion
at the same time? The answer: When it’s sitting on a portable device being
transported all around by your employees.

With the rise of remote working and data on-the-go, company data has
become increasingly exposed and in danger of being compromised. But the Aegis
Fortress L3 portable storage drive from Apricorn removes the risk of sensitive
information falling into the wrong hands.

The ultra-rugged and securely encrypted drive is designed to
protect the most sensitive data of companies, especially those operating in
industries where data security is
federally regulated and compliance is mandated. And since it’s software-free
and platform agnostic, it is compatible with all operating systems and machines
with USB connectivity.

The L3 doesn’t mess around with preset default PINs – a common security vulnerability that could allow an
unauthorized party to easily access the data if they were to take possession of
the device. As an alternative, the drive comes standard with Apricorn’s “Forced
Enrollment feature,” which requires the admin to register a unique PIN. le
drive also allows for a separate user PIN to be established.

The L3’s complete FIPS (Federal Information Processing Standard)
140-2 Level-3 validation is the highest level assigned by the National
Institute of Standards and Technology (NIST) to portable encrypted devices, and
the validation boundary includes the electronics, drive, external fasteners and
even the enclosure itself.

Finalists 2020

Trust Award
Best NAC Solution
Cisco Systems, Inc.
Cisco Identity Services Engine (ISE)

As
NACs go, the Cisco Identity Services Engine (ISE) plays well with others.

Benefiting
from Cisco’s extensive partner ecosystem for automated solution integrations
and an IETF standards-based integration platform, ISE also meshes with other
products in the company’s extensive line, including Cisco Firepower,
Stealthwatch and Advanced Malware Protection.

Cisco’s
commitment to baked-in
security is borne out with ISE, which builds advanced security directly into
the network, enabling secure access while simultaneously turning it into a
zero-trust enforcer.

ISE offers a bevy of rich features, including visibility to assets connected to the networks; secure wired, wireless and VPN access; device compliance; and network segmentation, which can reduce the scope of compliance. As with most Cisco solutions, ISE is highly scalable, supporting up to 2 million concurrent endpoint sessions. The company touts ISE as the only NAC solution that includes TACACS+ for role-based, administrative access control to networking equipment.

Its scalable architecture along with an intuitive interface and supported integrations translate into accelerated NAC project roll-outs, with organizations saying they spend less time configuring and troubleshooting and achieve key project milestones more quickly.

All in all, Cisco ISE users can expect a positive impact on economics and an impressive return on investment, according to an analyst who found that organizations using ISE have seen savings of about $1.9 million . ROI for some has hit 120 percent with payback of 12 months.

Avec
numbers like those – and ISE’s ability to play well with others – it’s no
wonder that Cisco has a commanding presence in the NAC field with 34.3 percent
of the marketplace and more than 29,000 customers sprawled across the Fortune 500.

Finalists
2020

Professional Award
Best Professional Certification Program
ISACA
Certified Information Security Manager (CISM)

ISACA celebrated its 50th anniversary in 2019, and now in 2020 it
has a new reason to rejoice: Its Certified Information Security Manager (CISM) program has won Best Professional Certification Program
at this year’s SC
Awards.

The global association, which provides training and education to
140,000 members via 460,000 engaged practitioners, calls CISM the only
management-level certification for infosec professionals.

Most security certifications measure professionals’ comprehension
of the technologies and processes they use. But CISM distinguishes itself by
also assessing their understanding of how their work supports their various organizations’ specific
business goals.

Such knowledge can be critical for CISOs who must communicate
ideas to leaders within the C-suite and at the board level. And the payoff is
significant: According to ZipRecruiter data, the average annual pay of a CISM
in the U.S., as of January 2020, is $134,220.

Earned by more than 42,000 professionals since its inception in
2002, a CISM certification requires five years of work experience, including a
minimum of three years of information security management in several job
practice analysis areas.

CISM is updated frequently to reflect the ever-changing job roles
and responsibilities of security managers, and the fast-evolving threat
landscape. Rigorous continuing education is necessary to maintain the certification.

Members can receive their training via ISACA’s Cybersecurity Nexus
(CSX), which offers courses and real-world lab environments. ISACA has a
presence in more than 188 countries, with over 220 chapters worldwide.

“I already had the technical skills in the cybersecurity space and
could demonstrate that, but the CISM gave me the credibility to talk to the
business about risk and policies,” said security professional Michelle Malcher,
CISM. “The CISM provided me the step I needed to move to an architecture role.”

Finalists 2020

Excellence Award
Best Regulatory Compliance Solution
OneTrust
Privacy Management Software

Un
alphabet soup of privacy regulations proliferating across the country and the
world are creating compliance headaches for enterprise security teams. Mais
instead of adopting a steady diet of aspirin, companies in myriad industries,
including 250 of the Global 2,000, have turned to OneTrust’s Privacy Management
Software, a privacy, security and third-party risk technology platform designed to make
compliance with the likes CCPA, GDPR, HIPAA, GLBA and ISO27001 a lot less
painful.

OneTrust
is finding an eager audience among companies keen on showcasing their
commitment to privacy and
transparency to consumers and boosting their market position. To keep up with
the latest privacy laws and security updates, OneTrust has created an agile
process that includes issuing a new major product release every three weeks.

le
company’s 2019 acquisition of DataGuidance has enriched and deepened the
OneTrust privacy and security regulatory research platform. The company has
inspired what it says is the largest privacy community, with more than 10,000
active users. And it offers more than 250 free, one-day PrivacyConnect
workshops globally, as
well as two PrivacyTech annual global user conferences.

UNE
1,000-person-strong
team dedicated to privacy technology, including 450 in R&D, keeps OneTrust au courant and ahead of
the game. With more than 200 services and support team members providing 24/7
support, it’s clear why OneTrust has racked up a 95 percent customer
satisfaction (CSAT) score.

“One of the advantages of OneTrust is the ability to streamline compliance globally where it’s not just siloed to one department or one location,” said Renate Lang, legal counsel/Head Practice Group HR & Data Protection at Schindler, a Swiss provider of elevators, escalators and moving walkways. “My colleague in Germany can use it same as I can in Switzerland.”

Finalists
2020

Trust Award
Best Risk/Policy Management Solution
SaltStack
SaltStack SecOps

The huge volume of data leaks caused by misconfigured databases
this year is a sure indicator that many IT security teams are having a hard
time managing the complex nature and scale of a modern infrastructure.

To help IT teams get a handle on this situation, SaltStack offers
its advanced capabilities in infrastructure automation to the security and
vulnerability management markets, in the form of its SaltStack SecOps IT
security remediation solution.

SaltStack automates the work of fixing thousands of possible
configuration issues, vulnerabilities and non-compliant infrastructure settings,
instead of simply informing the organizations that there is a problem and then
leaving their work in their hands.

Additionally, SecOps scans infrastructure environments; determines
non-compliance with policies and standards such as CIS Benchmarks, DISA-STIGS,
or NIST; and then automates remediation of any discovered vulnerabilities or
misconfigurations. This level of automation includes a persistent connection
between a master command-and-control server and minions or proxy agents on any
managed infrastructure (e.g. public and private cloud, network infrastructure,
any OS and containerized environments).

“SaltStack forms the basis of a comprehensive audit, remote
execution, configuration management, patch, and baseline enforcement suite for
the IBM Cloud network,” said Brian Armstrong, an IBM Cloud executive. “This has
replaced several disparate legacy tools with a single command-and-control layer
that allows us to automatically roll out new security policies and quickly
react to any new security threats. Problem scoping, mitigation and audit is
done in hours rather than weeks across our network.”

The IBM Cloud team saves thousands of hours by automating SecOps,
reducing vulnerability remediation time by 75 percent.

Finalists 2020

Trust Award
Best SCADA Security Solution
CyberX
CyberX IoT/ICS Cybersecurity Platform

The threat level against manufacturers, utilities and critical
infrastructure operators has never been higher, meaning the need for ICS/SCADA security
products like CyberX’s IoT/ICS Cybersecurity Platform is equally in demand.

Simply put, extending legacy cybersecurity technologies that were originally
constructed for IT networks is not the best solution when it comes to
protecting ICS/SCADA environments.

Since no two of the entities requiring this type of protection are
the same, any product for use in these environments must be built from the
ground up, and tuned for the specialized devices, protocols, vulnerabilities
and machine-to-machine (M2M) behaviors found in ICS/SCADA environments. Ça aussi
must incorporate a deep understanding of the world of ICS/SCADA, particularly
when IoT devices are thrown into the mix. CyberX’s IoT/ICS Cybersecurity
Platform fits the bill in both cases.

The platform addresses three key areas – asset discovery, passive
risk and vulnerability management, and continuous threat monitoring – while
using patented, M2M-aware behavioral anomaly detection and self-learning to
immediately identify zero-day attacks and stop them.

A feature is speed, both during installation and while actively
working. Within an hour of being installed, the software will begin to deliver
insights without the need for additional configuration by the customer. It can
quickly identify and mitigate malicious activity, enabling companies to avoid
the high cost of targeted attacks and malware in industrial environments that
could potentially result in plant shutdowns, theft of intellectual property or even catastrophic
safety incidents.

Customers benefit from ease of deployment, as well as platform
maturity and scalability that comes from deployments in 2,500-plus ICS/SCADA
networks. Founded in 2013, CyberX bills itself as the longest-standing
pure-play provider of ICS/SCADA security.

Finalists 2020

Excellence Awards
Best Security Company
CrowdStrike

By any account, it was a momentous year for
CrowdStrike in 2019.

The company in June made its initial public offering on the
NASDAQ stock exchange, raising $612 million in what has been described as the
biggest IPO ever for a cybersecurity company.

CrowdStrike also held its ground and stood firm after being
subjected to a false conspiracy theory and high-profile political attack that
sought to discredit the company’s role in the investigation of the 2016
Democratic National Committee hacking attack.

But first and foremost, the primary reason SC Media has named
CrowdStrike Best Security Company for 2020 is the company’s latest outstanding efforts
at protecting the user community.

Such efforts begin with CrowdStrike Falcon, a next-generation, cloud-native platform
that unifies anti-virus, endpoint detection and response, managed hunting, IT hygiene
and threat intelligence – all delivered through a lightweight, single agent.
The solution defends customer workloads across on-premise, virtualized and
cloud-based environments running on a variety of endpoints, on or off network.

Additionally, CrowdStrike offers organizations access to
OverWatch, an elite force of renowned threat hunters, intrusion analysts and
first responders.

In February 2019, the company launched the CrowdStrike Store, a
cloud-based application platform-as-a-service for cybersecurity, through which
new start-ups or
technology partners can develop their own applications to integrate into the
Falcon platform for user organizations to discovery, try and purchase. And to
stoke further innovation, CrowdStrike announced the Falcon Fund, which will act
as a co-investor and strategic partner alongside lead investors looking for
innovative start-ups
whose products will be added to the CrowdStrike Store.

Finalists 2020

Professional Award
Best Security Team
Penn Medicine
Penn Medicine Information Security

le
health care industry has been under siege for the last several years as
malicious actors try to exploit the myriad, and often older, connected systems
found in a medical facility. For that reason, Penn Medicine, also known as the
University of Pennsylvania Health System, has found itself on the very front
lines when it comes to being targeted by cyberattackers.

le
environment protected by the
Penn Medicine Information Security team is truly daunting. The 35-person-strong
unit oversees the security of 50,000 employees spread across six hospitals and
outpatient facilities. To handle this gargantuan task, Penn Medicine has more
than tripled the number of cybersecurity personnel in the last two years, and
during this time period has evolved its internal structure from one to five
teams: Information Assurance, Security Engineering, Security Operations,
Security Architecture and Office of the CISO (OCISO).

le
high level of success achieved by Penn Medicine Information Security is due to
the close relationship it maintains with corporate leaders and those on the
medical side of the operation. This is accomplished by “taking security into
the field” to work first-hand with the clinical and research communities, which
helps bring them closer to the technology and policy decisions that help ensure
data remains protected. This also
helps create a culture where all staffers know that cybersecurity should be
part of their daily conversation.

As
any health worker knows, a body must remain strong in order to fight off an
infection, so Penn Medicine Information Security has several programs in place
to make sure its security workers are operating at their highest level. Cette
includes certification training, bi-weekly training and the Penn Test
Challenge, which uses gamification to improve diagnostic and mitigation skills.

Finalists
2020

Trust Award
Best SIEM
LogRhythm
LogRhythm NextGen SIEM Platform

Ses
easier to ask forgiveness than permission – or so the saying goes. That might
be true in other walks of life, but not when it comes to cyberattacks where the
damage to assets and reputation can be devastating. Staying a step ahead of
attackers is getting harder by the day, but the kind of analytics that identify threats and the
ability to mitigate them delivered by the LogRhythm NextGen SIEM Platform
empower organizations to successfully reduce risk by rapidly detecting,
responding to and neutralizing damaging cyberthreats.

LogRhythm recently made available on
the cloud the same data lake technology, AI, security analytics and security
orchestration, automation, and response (SOAR) to power and unify forensic
visibility, advanced threat detection, and incident response that have
distinguished the NextGen SIEM Platform as an scalable end-to-end on-premises
solution.

le
platform lets organizations manage threats throughout the entire attack
lifecycle via a single user interface and the RespondX component streamlines
investigation and mitigation through SOAR capabilities, accelerating both
threat investigation and incident response. Security teams will benefit from
centralized forensic visibility into activity across the extended IT and
operational environment that provides deep and immediate insight into threat
activity.

LogRhythm’s
singular focus on security has paid off with a platform that it is easy to
adopt – as much as three times faster than with other solutions, the company
says – and
risk-based monitoring and prioritization that reduces alarm fatigue and helps
focus analysts on the most impact security events through the use of
environmental risk characteristics and threat context that assign risk-based
scores to all events and alarms.

Finalists 2020

Excellence Award
Best SME Security Solution
Untangle
NG Firewall

Cyberattackers don’t take pity on the little guy. Underfunded,
understaffed municipalities, local school districts and small businesses all
fall victim to malicious attacks and, despite a victim’s diminutive size, the
consequences can be enormous.

For over 40,000 small-to-medium enterprises, Untangle is the
bodyguard that stands up to the big cyber bully. Its network security framework
provides cloud-managed security and connectivity options that ensure
protection, monitoring and control across the entire digital attack surface
from headquarters to network edge. And its flagship product, NG Firewall,
provides scalable unified threat management capabilities, with the ability to
set policies for specific devices or people, but without the need to maintain
additional hardware.

Untangle recently released NG Firewall v14.2, which introduced significant
enhancements to web security and content filtering, the ability to synchronize
users with Azure Active Directory, and enhancements to intrusion detection.

The solution continuously monitors emerging malware threats and
zero-day exploits through Untangle’s cloud-based threat intelligence service.
Known threats are blocked at the gateway, promptly short-circuiting the attack.

NG Firewall pricing starts at free. Customers can then choose the
individual features they want, only paying for what they need. NG Firewall is
sold as scalable software solution, and

Untangle’s technology applications and cloud-based solutions
provide unique deployment options for customers, many with complex deployment
levels based on budget and network infrastructure.

Untangle offers U.S.-based technical support that does not force
customers to contend with time-wasting call-center menus. Such convenience
likely helped contribute to an average 95.91% customer satisfaction rating over
the last four years.

Finalists 2020

Trust Award
Best Threat Detection
Fidelis Security
Fidelis Elevate

Demander
any pilot: low visibility can lay ruin to the best laid flight plans. Same goes
with cybersecurity strategies, where visibility is crucial to detecting and
responding to threats.

Fidelis Elevate seeks to provide that visibility across the entire kill chain using multiple detection methods. The platform integrates network and cloud traffic analysis, endpoint detection and response, and deception technologies with open threat intelligence feeds, cloud-based sandboxing and advanced malware analysis as a means to automate threat detection, investigation and response.

Elevate
taps content- and context-rich metadata for more than 300 attributes – it
custom tags up to 360 days for network traffic analysis and 90 days for
endpoint process and event metadata. Many of the threat detection,
investigation and response process steps are automated, reducing response times
and minimizing business impacts.

le
platform automatically validates across layers, consolidating similar alerts,
which offers busy analysts a streamlined workflow and focuses them on the most
important detections. The heavy integration between products in the Fidelis
platform creates force multipliers such as information sharing, and software
inventory and known vulnerabilities from endpoints shared with network and
deception solutions. An open threat intelligence feed supporting network and
endpoint solutions includes internal threat intelligence and custom indicators
and rules that are developed by users.

Fidelis
touts a lower TCO than other market offerings thanks to the integration of EDR,
network traffic analysis and deception.

Finalists 2020

Trust Award
Best Threat Intelligence Technology
Noir carbone
CB ThreatHunter

Some organizations collect endpoint data to track down threats only
when some kind of anomalous behavior is detected. The problem is, the best
cyberattackers know how to conceal their malicious activity to make it look
like everything is perfectly normal.

For that reason, Carbon Black has programmed its CB Threat Hunter
solution to collect tout endpoint data – completely unfiltered – and
analyze it to proactively seek out and uncover suspicious behavior, disrupt
active attacks and address gaps in defenses before bad actors can.

Unfiltered data, collected by Carbon Black’s cloud-native endpoint
protection platform, provides users with the most complete picture of an attack
at all times. Meanwhile, the solution provider’s advanced artificial
intelligence/machine-learning technology helps teams parse data more
efficiently, reducing lengthy investigations from days to minutes.

According to Carbon Black, the massive amounts of data that CB
Threat Hunter collects would be overwhelming for organizations using more
conventional solutions, because the volume of information collected would
consume too much time and money for security teams to store and analyze.

But Carbon Black created proprietary data-shaping technology that
overcomes the data pipeline challenge and delivers high-volume endpoint data to
the cloud. To realize the potential of this unfiltered data set, the company
leverages streaming analytics to evaluate behaviors over time. Its real-time analysis
is based on event stream processing, the same technology that has transformed
many other industries like credit card fraud detection.

CB ThreatHunter provides the power to respond to threats and
remediate them in real-time, stopping active attacks and repairing damage
quickly, all from a cloud-based platform using a single agent, console and
dataset.

Finalists 2020

Trust Award
Best UTM Security Solution
SonicWall
NSa 2650

Plus
than just a sentry standing between an organization’s most valuable assets and
the threats that lie beyond, the SonicWall NSa 2650 provides high-speed threat
prevention over thousands of encrypted and unencrypted connections, delivering
high security effectiveness to mid-sized networks, branch offices and
distributed enterprises. All without diminishing network performance.

Marrying
two advanced security technologies – a multi-engine Capture Advanced Threat
Protection sandbox service enhanced by Real-Time Deep Memory Inspection (RTDMI)
technology and the company’s ReassemblyFree Deep Packet Inspection – the NSa
2650 proactively blocks mass-market, zero-day threats and unknown malware and
examines every byte of every packet.

It only takes a single appliance to automatically update malware and IPS signatures daily, connect to cloud-based sandboxing to spot and stop unknown attacks, decrypt and inspect TLS/SSL traffic over thousands of encrypted and unencrypted connections, eliminate attacks without slowing performance, and provide users with a unified deployment experience through seamless integration of 802.11ac Wave 2 wireless connectivity.

Drawing
from real-time information from the SonicWall Capture Labs threat research team
as well as industry collaboration and threat research communities that gather
and share around 140,000 attack and vulnerability samples daily, SonicWall
automatically deploys countermeasures to the NSa 2650.

Central
management through the SonicWall
Global Management System (GMS) on-premises solution or the cloud-based
Capture Security Center (CSC) reduces total cost of ownership and helps relieve
the burden on IT.

Finalists
2020

Trust Award
Best Vulnerability Management Solution
Qualys
Global IT Asset Inventory

Qualys lives by the motto “You cannot secure what you can’t see.”
With that in mind, the infosec and compliance solutions provider is offering
user organizations the gift of sight – with its free(mium) Global IT Asset
Inventory (ITAI) solution.

ITAI provides complete and continuous asset inventory in complex
hybrid environments, allowing users to instantly know what assets connect to
their network, and assess their security and compliance posture in real time.
Such visibility allows organizations to find unknown assets before an attacker
does and takes advantage.

The solution offers automated classification for clean, reliable
data; the ability to search and identify known and unknown assets in seconds;
and integrated IT, security and compliance data.

Combining all these capabilities into one solution represents a
significant improvement over having to manually clean up and correlate the
asset data of multiple disparate point products – a complicated and time-consuming
process.

In the process of scrubbing a company’s data, ITAI makes it
uniform, eliminating variations in product and vendor names – for instance, “Microsoft,”
“Microsoft Corp.,” and “Microsoft Corporation” – that clutter asset inventories
and render them ineffective.

ITAI allows an organization’s security team to expend less manual
effort on constantly checking the networks for threats, because the app is
already doing it. And the freemium model allows companies to allocate their
resources toward other security products that are necessary to maintain the
best security posture and stay compliant with federal regulations and standards
such as PCI DSS, HIPAA, GDPR and FedRAMP.

Finalists 2020

Trust Award
Best Web Application
Cequence Security
Cequence Application Security Platform

The open, highly scalable Cequence
Application Security Platform protects web, mobile and API applications from
external attacks using a powerful pair of app security modules, with the
promise of more in the works.

Easily managed through a single pane of
glass, Cequence’s ASP can be deployed on premises or in the cloud, across any
number of locations.

le
CQ appFirewall module combines advanced WAF security capabilities, supporting
OWASP requirements, and detecting and defending against known and unknown
vulnerability exploits by bad actors.

Meanwhile, the CQ
botDefense module protects against automated bot attacks, including those
designed for account takeover, fake account creation, API abuse, content
scraping and financial fraud.

le
modules work seamlessly with Cequence ASP’s CQAI AI-powered engine, which
performs a single-pass, multi-dimensional analysis to detect attacks, then
automated mitigation to stop them in their tracks, before they achieve their
objectives.

Enterprises
large and small benefit from an open architecture that provides seamless
integration and information exchange with other security tools in the network
and gives security teams a more complete view of attack and response
information. Security teams also gain visibility into apps that need protecting
through automatic discovery of all web, mobile and API-based applications an
organization has deployed.

Ses
ability to detect and eliminate unwanted app traffic can translate into higher
staff productivity, better app performance and measurable cost savings. Une
Fortune 500 customer, Cequence says, saved $1.7 million in 60 days because ASP
eliminated the need for unnecessary infrastructure oversizing and resolved
compromised accounts from bot attacks.

Finalists 2020

Professional Award
CSO of the Year
Vikrant Arora
CISO, Hospital for Special Surgery

As the first CISO of the Hospital for Special Surgery (HSS) in New
York, Vikrant Arora aims to attack cyber risk with surgical precision.

He maintains a strong focus on supporting digital innovation,
raising organizational confidence in security, hiring quality talent, and
laying the foundation for a multi-year security program that aligns with HHS’
mission.

Edward Marx, CIO of the Cleveland Clinic, said Arora “has been
first amongst peers to leverage machine learning and DevSecOps, while
simultaneously developing solutions that addressed gaps in otherwise lax
security standards.”

For instance, Arora implemented deep learning and behavioral-based
authentication for privileged access, and also incorporated
machine-learning-based malware detection on more than 6,000 endpoints. HHS
assesses that Arora’s efforts have reduced the risk of unauthorized exposure of
electronically protected health information by more than 80 percent in the
public cloud and on-premises infrastructure.

A long-time advocate of addressing the security of connected
medical devices, Arora envisions an ecosystem of security solutions fueled by
data. He has implemented
solutions that provide real-time visibility into all connected biomedical
devices, enabling HSS to promptly identify ones that may be vulnerable to key threats and
exploits.

Arora has also put in place a robust risk management framework at
HSS, integrating security into business decisions, application development and the
supply chain right from inception. Under Arora’s watch, HHS also implemented
the DMARC email authentication protocol to prevent malicious actors from
spoofing HSS’ email domain as a means to trick external users.

Additionally, Arora is collaborating with law enforcement,
security vendors and other healthcare organizations on an Early Warning System
that could potentially allow the health care industry to stay ahead of the
curve in a volatile threat landscape.

Finalists 2020

Excellence Award
Rookie Security Company of the Year
Barac

London-based cybersecurity start-up Barac says it can detect
malware hidden within encrypted traffic with 99.997% accuracy. Even more
impressively, it does so without resorting to decryption.

Here’s how: Every malware attack has its own SSL metadata
signature between the user and the server. Capable of analyzing more than 100
million events per second, Barac’s Encrypted Traffic Visibility (ETV) platform picks
up on these signatures and identifies
these abnormalities with high accuracy by analyzing this metadata in real time
using AI and behavioral analytics.

Conversely, more typical detection solutions inspect encrypted
traffic by decrypting the data into cleartext, blocking any discovered
malicious code, and then re-encrypting what remains. But according to Barac,
this process can place significant computing stress on one’s network.

Barac customers, however, sidestep this problem, thus avoiding
traffic slowdowns, user experience degradation and costly hardware investments.
Additionally, user organizations need not worry that they are violating privacy
regulations by decrypting communications.

The ETV platform is an especially important tool for companies,
given the advent of the new Transport Layer Security 1.3 protocol, which
doesn’t allow decryption. The solution is also useful for data centers, where
the vast majority of traffic is already encrypted; IoT, where encryption
renders normal security tools useless; and encrypted traffic between APIs and
back-end applications.

Barac can deploy its software on a physical or virtual server, or
can make it available as a software-as-a-service solution. Deployment is made
easier through integrations via API with various SIEM platforms.

Barac operates R&D teams in London and Tunisia, and recently opened a U.S. office in Boston. In late 2018, the UK GCHQ’s National Cyber Security Centre selected Barac for its prestigious Cyber Accelerator program.

2020 Finalists

Professional Award
Editor’s Choice AWARD

Winner
Global Cyber Alliance

When it comes to basic, yet fundamental, cybersecurity
tools that can make the difference between a costly hack and business-as-usual,
no organization should be relegated to “have-not” status. That’s why the Global
Cyber Alliance, an international, multisector community of partners seeking to
combat cyber risk, worked hard this past year to put free security toolkits in
the hands of user organizations in need.

These toolkits can reduce cyber risk by as much as 85
percent, asserts the GCA, which was founded in 2015 by the City of London
Police, the New York District Attorney’s Office and the Center for Internet
Security.

Buoyed by a $1.068 million donation, the GCA in April
2019 launched the Craig Newmark Trustworthy Internet and Democracy Program to
provide toolkits to news outlets, government functionaries, election officers
and community organizations, in an effort to improve cybersecurity defenses as
the 2020 U.S. election approaches.

The toolkits consist of easy-to-use operational tools,
guidance and recommendations, helping ensure election integrity while protecting
the media from attacks that could expose anonymous sources or manipulate public
opinion. With the help of an additional $750,000 donation, the organization launched
a second wave of the campaign in December 2019.

The election toolkit program is an offshoot of the Cybersecurity
Toolkit for Small Business, which GCA launched last February in conjunction
with Mastercard as a way to help SMBs –which often suffer from a lack of cyber
resources – protect themselves, their customers and their partners.

“Our focus is on producing a dynamic clearinghouse of
operational tools that help small and medium businesses address risk and
improve their cybersecurity posture…” said Philip Reitinger, GCA president and
CEO, when the program was first launched.

GCA reports that the small business toolkit has already been
accessed more than 66,700 times, while the elections toolkit has been accessed
more than 1,900 times.

The organization has also been pushing for more
trustworthy Internet of Things devices, more secure emails via Domain-based
Message Authentication & Conformance (DMARC), and safer Internet browsing through
Domain Name System protections.

Last August, the group collaborated with partners to
launch the Automated IoT Defense Ecosystem (AIDE), a development platform offering
data collection, analysis and automated defense capabilities as a means to help
users identify vulnerabilities and mitigate risks in IoT devices.

AIDE pools data from its own 1,200-node honeyfarm, as
well as from other external organizations’ data feeds. The platform records an
average 9.5 million attacks per day and, since inception, has collected more
than 12 terabytes of attack data on IoT devices.

The platform also comes bundled with GCA ProxyPot, a
custom IoT honeypot solution that can replicate an IoT device across multiple
IP addresses and physical locations to help sniff out compromise attepmts. GCA
intends to eventually open source this technology.

In a related effort, GCA has also entered into
collaboration with Attivo Networks to build a SCADA honeyfarm to collect threat
intelligence on attacks targeting industrial control systems.

Additionally, GCA has developed tools and services and advocated
for policy changes that have enabled more than 7,300 companies and government
agencies to deploy DMARC as a means to prevent e-mail spoofing and phishing.

According to the GCA, the Department of Homeland Security
credited the Alliance with influencing its decision to issue a binding directive
requiring U.S. government agency email domains to use DMARC. Later, the
Department of Defense would follow suit.

In September, GCA completed its first DMARC Bootcamp, a
tutorial experience designed to acquaint user organizations with the protocol
and guide them through implementation. It was attended by more than 1,800
registrants from 55 countries and 40 industries.

Later, in November, the GCA released its DMARC
Leaderboard, an interactive tool through which users can measure and quantify DMARC
deployment. The Leaderboard can rank DMARC usage by country, industry and DMARC
policy level, providing intelligence on tens of millions of email domains.

Additionally, in collaboration with IBM and Packet
Clearing House, the GCA spearheaded the creation of Quad9, a free domain name
protection service designed to stop consumers from accessing websites known to
be infected with malware or associated with phishing campaigns. Launched in
November 2017, Quad9 resolves billions of queries and blocks at least 10
million malicious events per day.