Nov, 2001 : Loudcloud Announces Four New Security Services

📅 November 21, 2001 - Loudcloud Inc. (loudcloud.com), a managed services provider, announced yesterday four new managed security services: Vulnerability Analysis, Intrusion Detection Analysis, Application Code Review, and Application Attack Simulation. These offerings expand Loudcloud Security Services, powered by Opsware automation technology. This technology bolsters the security of customers' Internet operations by minimizing human error in deploying, monitoring, and managing systems.

In addition, Loudcloud Security Services have earned SAS 70 Type I and TypeII Audits and SysTrust Certification through Ernst & Young LLP, the firstcertification of its kind to awarded in North America. Ernst & Young LLPconducted these Audits and awarded the Certification after completingrigorous independent reviews. The SAS 70 Audits measure and assess criticalsecurity-related elements and attest that vital operational controls havebeen effectively implemented.
Through these new services, Loudcloud continuously monitors customerenvironments for over 500 attack signatures, recording over 100,000 alertsper month. Loudcloud also evaluates over 500 critical security patches ayear from various vendors and performs a 30-point security inspection aspart of the go-live process.
Loudcloud's four new managed security services are:
Intrusion Detection Analysis: This service analyzes the latestscans, probes, and intrusion attempts directed at the customer's site andprovides customers with a detailed report of statistics highlighting themajor types and sources of attack. The report, which existing customers maypurchase on a one-time or subscription basis, helps customers identifymalicious patterns and design appropriate countermeasures.Vulnerability Analysis: Loudcloud security experts identify andanalyze weaknesses in the customer's site profile and recommend a course ofaction to address any security exposures that are identified. The analysisis performed using leading vulnerability assessment tools and includes areview of the customer's public IP addresses and Web applications. Thisstand-alone service allows both current and non-Loudcloud customers to takeadvantage of Loudcloud's security expertise to evaluate their site defenses.Application Attack Simulation: Utilizing Loudcloud's partnershipwith @stake, a leading digital security consultancy and Loudcloud partner,this service models specific threat scenarios, locates vulnerabilities, andvalidates specific exploitation possibilities. This strengthens defenses atthe application level and provides customers a deeper level of analysis.This service is available to both new and existing Loudcloud customers.Application Code Review: Security experts will examine itscustomer's application source code for existing customers to detect insecurecoding techniques or practices that may allow for vulnerabilities such asURL tampering and cookie poisoning. This service also taps into theexpertise of Loudcloud's partner, @stake.
In addition to these multiple options that customers can choose to enhancetheir site security, every Loudcloud customer automatically receives thefollowing items as part of Loudcloud Security Services: a multi-pointgo-live review, intrusion detection services, "server hardening," patchmanagement, physical site security, 24x7 security monitoring, a secure VPNand dedicated, fully managed, dual redundant firewalls.