词条 | Trustwave Holdings |
释义 |
| name = Trustwave Holdings, Inc. | logo = | logo_size = | logo_alt = | logo_caption = | logo_padding = | image = | image_size = | image_alt = | image_caption = | trading_name = Trustwave | former_name = | type = Subsidiary | traded_as = | ISIN = | industry = Managed Security Services, Information Security, Cloud computing | fate = | predecessor = | successor = | founded = {{Start date|1995}} | founder = | defunct = | hq_location = | hq_location_city = Chicago, Illinois | hq_location_country = United States | coordinates = | num_locations = | num_locations_year = | area_served = Worldwide (Customers in 96 countries) | key_people = Arthur (Art) Wong, CEO | products = {{ublist |Application Security Testing |Data Loss Prevention |Database Security Scanning |Endpoint Protection |IDS/IPS |Network Access Control |Secure Email Gateway |Secure Web Gateway |SIEM |Two-factor authentication |Unified Threat Management |Web application firewall |Web Security}} | brands = Trustwave Trustwave TrustKeeper Trustwave SpiderLabs | production = | production_year = | services = {{ublist |Managed Security Services |Threat Management |Vulnerability Management |Compliance Management |Incident Response |Security Scanning |Penetration Testing}} | revenue = US $216 million [1] | revenue_year = 2014 | operating_income = | income_year = | net_income = | net_income_year = | aum = | assets = | assets_year = | equity = | equity_year = | owner = | members = | members_year = | num_employees = 1,600+ [2] | num_employees_year = | parent = Singtel[3] | divisions = | subsid = | module = | website = {{URL|www.trustwave.com}} | footnotes = | intl = }} Trustwave Holdings is an information security company that helps businesses fight cybercrime, protect data and reduce security risk.[4] The company's international headquarters is located in downtown Chicago,[5] and regional offices are located in London, São Paulo, and Sydney. The company also operates Security Operations Centers in Chicago, Denver, Manila, Minneapolis, Singapore, Sydney, Tokyo, Warsaw, and Waterloo in Canada.[6] Trustwave is currently the only company that is an authorized PCI Forensic Investigator in all geographic regions.[7] Trustwave is a standalone business unit and cyber security brand of Singaporean telecommunications company Singtel Group Enterprise. HistoryIn April 2011, Trustwave Holdings filed for its IPO[8] though the company is now a standalone subsidiary of Singtel. Trustwave's website says the company has more than 1,600 employees.[9] On April 8, 2015 (SGT), Singapore Telecommunications Ltd (Singtel) announced it had entered into a definitive agreement to acquire Trustwave Holdings, Inc. for a fee of $810 million—Singtel with a 98% stake in the company leaving 2% with Trustwave's CEO and President.[1][10] According to media reports and Singtel filings on the Singapore Exchange, the enterprise value of Trustwave at the time of the deal was $850 million.[11] Acquisitions
Products and technologiesManaged Security Services is a service that involves remotely managing third-party products such as Network Access Control, SIEM, and United Threat Management for companies who wish to outsource their security needs. According to the Forrester Wave: Managed Security Services: North America, Q4 2014, Trustwave is a market leader in managed security services.{{Citation needed|date=April 2017}} TrustKeeper is a cloud-based platform that ties together Trustwave's various managed security services. Through TrustKeeper businesses can access a variety of Trustwave "apps" ranging from enterprise-class managed security services to PCI compliance automation tools designed to help credit card merchants protect themselves against unauthorized access.{{Citation needed|date=April 2017}} Managed Security Testing is an application within TrustKeeper that provides an interactive way to view and track penetration test reports as an alternative to conventional PDF based reports. Earlier versions were called Trustwave PenTest Manager, and it won the 2012 SC Magazine Europe Innovation award.[17]Secure Web Gateway (formerly Finjan): an appliance-based secure Web gateway that uses real-time code analysis technology, URL filtering and antivirus scanning to prevent malware and Web-based threats.[18]In May 2011, the M86 Secure Web Gateway was designated as Visionary in the 2011 Gartner Magic Quadrant Report for Secure Web Gateways.[19] Secure Email Gateway (formerly M86 MailMarshal): an email security solution, available as software or through a cloud-based service, that protects against malware, spam and data leakage. It also provides reporting, analyzes inbound and outbound content and assists with policy control.[20] In April 2010, the M86 MailMarshal SMTP product was designated Visionary in the 2010 Gartner Magic Quadrant Report for Secure Email Gateways.[21]Associated Technologies:[22]
Significant discoveries
Congressional testimonyIn February 2014, Trustwave SVP Phillip. J. Smith offered expert testimony related to data breaches and malware as part of a Congressional hearing for The House Committee on Energy and Commerce. In his prepared testimony, he presented observations based on the company's experience investigating thousands of data breaches, ongoing malware and security research and other forms of threat intelligence.[41] Unrestricted sub-CA incidentTrustwave operates an X.509 certificate authority ("CA") which is used as the top level of trust by many web browsers, operating systems, and other applications (a "trusted root CA").{{citation needed|date=January 2016}} In 2011, Trustwave sold a certificate for a subordinate CA which allowed a customer to present SSL certificates identifying as arbitrary entities, in a similar mechanism to a "Man in the Middle Attack". This type of action is similar to the practice of running an SSL proxy on a corporate network, though in this case a public subordinate CA (valid anywhere) was used instead of an internal corporate-generated domain CA (valid only for machines that accept it as part of organizational policy), making the risk of abuse much higher. Though Trustwave asserts that special precautions were put in place to ensure that the customer attached its device only to a particular customer-owned network on which it was acceptable for the customer to impersonate other entities and to intercept traffic, this cannot be independently verified as Trustwave is unable to disclose the customer due to a Non-Disclosure Agreement.[42] As a result, there was some brief discussion as to whether it was an egregious enough action to have Trustwave's root CA removed from the Mozilla Firefox browser. However, no action was taken.[42] Allegations against TrustwaveIn March 2014, Trustwave was named in a lawsuit filed by Trustmark National Bank and Green Bank N.A. The lawsuit alleges that Trustwave failed to provide the promised level of security to Target, and for failing to meet industry security standards.[43][44] In April 2014, a notice of dismissal was filed by both plaintiffs, effectively withdrawing their earlier allegations.[45][46] Trustwave Chairman, CEO and President Robert J. McCullen also stated in a letter that "Contrary to the misstated allegations in the plaintiffs' complaints, Target did not outsource its data security or IT obligations to Trustwave. Trustwave did not monitor Target's network, nor did Trustwave process cardholder data for Target.".[47] RecognitionIn 2018, Gartner named Trustwave a Leader in its Gartner MQ for Managed Security Service Providers, Worldwide. It was the first vendor to move into the leader's quadrant since inception of the global report.[48] In 2016, IDC named Trustwave a Leader in the IDC MarketScape for Emerging Managed Security Services Providers based on industry analysis and buyer perception.[49] In the 2015 "Gartner Magic Quadrant for Managed Security Services, Worldwide," a report that evaluated 14 different global managed security service providers, Trustwave was named an industry challenger “due to the access it gained to greater resources and new markets resulting from the acquisition by Singtel, and its increasing investments in competing for enterprise customers.” [50] In 2014, industry analyst firm Forrester Research named Trustwave one of the leaders in the managed security services market.[51] References1. ^1 {{cite web | url = https://www.reuters.com/article/2015/04/08/us-singtel-m-a-trustwave-idUSKBN0MY2C820150408| title = Singtel buying U.S. cyber security firm Trustwave for $810 million| last = Aravindan| first = Aradhana| date =7 April 2015 | publisher = Reuters| access-date= 9 April 2015}} 2. ^{{cite web | url = https://www.trustwave.com/Company/About-Us/Our-Story/| title = Trustwave: Our Story| access-date= 25 May 2016}} 3. ^{{cite web|title=TRUSTWAVE PTE. LTD. (200616191R) - Singapore Business Directory|accessdate=30 August 2017|publisher=SGPBusiness.com|url=https://www.sgpbusiness.com/company/Trustwave-Pte-Ltd}} 4. ^1 2 3 4 5 6 {{cite web|url= https://www.crunchbase.com/organization/trustwave#section-overview|title=Trustwave Holdings|date= |accessdate=18 February 2019|publisher=Crunchbase}} 5. ^{{cite web|url=https://www.bloomberg.com/research/stocks/private/snapshot.asp?privcapId=11777224|title=Company Overview of TrustWave Holdings, Inc.|date= |accessdate=9 April 2015|publisher=Bloomberg}} 6. ^{{cite web|url=http://globalnews.ca/news/2160691/trustwave-security-firm-opens-first-canadian-security-operations-centre-in-kitchener-waterloo/|title=Trustwave security firm opens first Canadian security operations centre in Kitchener-Waterloo|date=12 August 2015|accessdate=30 September 2015|publisher=Global News}} 7. ^{{cite web|url=https://www.pcisecuritystandards.org/approved_companies_providers/pfi_companies.php|title=PFI Companies |date= |accessdate=9 April 2015|publisher=Payment Card Industry Security Standards Council}} 8. ^{{cite web | url = http://www.securityweek.com/trustwave-files-ipo-reveals-finances| title = Trustwave Files for IPO, Reveals Finances| last = Lennon| first = Mike| date =22 April 2011 | publisher = SecurityWeek| access-date= 8 April 2015}} 9. ^{{cite web | url = https://www.trustwave.com/Company/About-Us/Our-Story/| title = Trustwave: Our Story| access-date= 25 May 2016}} 10. ^{{cite web | url = https://www.trustwave.com/Company/Newsroom/News/Singtel-to-Acquire-Trustwave-to-Bolster-Global-Cyber-Security-Capabilities/| title = Singtel to Acquire Trustwave to Bolster Global Cyber Security Capabilities| date =7 April 2015 | publisher = Trustwave| access-date= 9 April 2015}} 11. ^{{cite web | url = https://techcrunch.com/2015/04/07/singtel-trustwave/| title = Singtel Acquires Chicago-based Cybersecurity Firm Trustwave For $810M| last = Shu| first = Catherine| date =7 April 2015 | publisher = TechCrunch| access-date= 13 April 2015}} 12. ^{{cite web | url = https://www.trustwave.com/Company/Newsroom/News/Trustwave-Acquisition-Bolsters-Data-Protection/ | title = Trustwave Acquisition Bolsters Data Protection | date = 11 November 2013 | access-date=8 April 2015 | publisher=Trustwave}} 13. ^{{cite web|url=https://www.trustwave.com/Company/Newsroom/News/Trustwave-Completes-Acquisition-of-M86-Security/|title=Trustwave Completes Acquisition of M86 Security|date=19 March 2012|accessdate=8 April 2015|publisher=Trustwave}} 14. ^{{cite web|url=https://www.trustwave.com/Company/Newsroom/News/Trustwave-Acquires-Intellitactics|title=Trustwave Acquires Intellitactics/|date=3 March 2010|accessdate=8 April 2015|publisher=Trustwave}} 15. ^{{cite web|url=https://www.trustwave.com/Company/Newsroom/News/Trustwave-Acquires-Vericept/|title=Trustwave Acquires Vericept|accessdate=8 April 2015|date=10 September 2009|publisher=Trustwave}} 16. ^{{cite web|url=https://www.trustwave.com/Company/Newsroom/News/Trustwave-Acquires-Mirage-Networks/|title=Trustwave Acquires Mirage Networks|accessdate=8 April 2015|date=17 February 2009|publisher=Trustwave}} 17. ^{{cite web|url=http://www.scmagazineuk.com/sc-magazine-awards-europe--winners-announced/article/237994/ |title=SC Magazine Awards Europe 2012 - winners announced |date=24 April 2012 |accessdate=8 April 2015|first=Dan|last=Raywood|publisher=SC Magazine UK}} 18. ^{{cite web|first=Peter|last=Stephenson |url=http://www.scmagazineus.com/m86-security-secure-web-gateway/review/3134/ |title=M86 Security Secure Web Gateway Review |publisher=SC Magazine US |date=1 April 2010 |accessdate=8 April 2015}} 19. ^{{Cite report |author=Lawrence Orans & Peter Firstbrook |date=25 May 2011 |title=Magic Quadrant for Secure Web Gateways |url=http://www.websense.com/assets/reports/report-gartner-magic-quadrant-for-security-web-gateway-2011-en.pdf |publisher=Gartner |page=2 |accessdate=8 April 2015 }} 20. ^{{cite web|url=https://www.messagingsolutions.com/mailmarshal.html |title=MailMarshal Email Content Security and Anti-Spam |publisher=Messagingsolutions.com |date= |accessdate=8 April 2015}} 21. ^{{Cite report |author=Peter Firstbrook & Eric Ouellet |date=27 April 2010 |title=Magic Quadrant for Secure Email Gateways |url=https://communities.cisco.com/servlet/JiveServlet/previewBody/20163-102-1-34350/Gartner%20Magic%20Quadrant%20for%20Secure%20Email%20Gateways-2010.pdf |publisher=Gartner |page=2 |accessdate=8 April 2015 }} 22. ^{{cite web|url=http://securecontenttechnologies.com/mailmarshal_smtp.html |title=Email Security » MailMarshal SMPT, providing services to the City of London Police Force |publisher=Secure Content Technologies |date= |accessdate=8 April 2015}} 23. ^{{cite web|url=https://www.trustwave.com/Company/SpiderLabs/ |title=Trustwave SpiderLabs |date= |accessdate=8 April 2015}} 24. ^{{cite web|url=http://www.modsecurity.org/help.html |title=ModSecurity Commercial and Community Support/Services |date= |accessdate=8 April 2015|publisher=ModSecurity}} 25. ^{{Cite web|url=https://www.trustwave.com/Products/SecureBrowsing/|title=Trustwave SecureBrowsing|last=|first=|date=|website=Trustwave|archive-url=|archive-date=|dead-url=|access-date=18 April 2018}} 26. ^{{cite web | url = http://www.eweek.com/security/skype-for-mac-backdoor-allowed-access-to-calls-messages-for-years.html | title = Skype for Mac Backdoor Allowed Access to Calls, Messages for Years | date = 15 December 2016 | publisher = eWeek | access-date= 17 December 2016}} 27. ^{{cite web | url = https://www.zen-cart.com/showthread.php?219732-Trustwave-Security-report-Patch-Included-TWSL2016-006 | title = Trustwave Security Report [Patch Included] | date = 17 March 2016 | publisher = Zen Cart | access-date= 8 April 2016}} 28. ^{{cite web | url = http://www.pcworld.com/article/3044145/security/top-websites-affected-by-angler-exploit-kit-malvertising-security-vendors-say.html | title = Top websites served out malicious ads harboring the Angler exploit kit | date = 15 March 2016 | publisher = PCWorld | access-date= 8 April 2016}} 29. ^{{cite web | url = http://www.securityweek.com/dridex-botnet-spreading-locky-ransomware-javascript-attachments | title = Dridex Botnet Spreading Locky Ransomware via JavaScript Attachments | date = 10 March 2016 | publisher = SecurityWeek | access-date= 8 April 2016}} 30. ^{{cite web | url = http://www.cio.com/article/3030416/the-neutrino-exploit-kit-has-a-new-way-to-detect-security-researchers.html | title = The Neutrino exploit kit has a new way to detect security researchers | date = 4 February 2016 | publisher = CIO | access-date= 8 April 2016 }} 31. ^{{cite web | url = http://www.darkreading.com/vulnerabilities---threats/cherry-picker-pos-malware-has-remained-hidden-for-four-years/d/d-id/1323128 | title = Cherry Picker POS Malware Has Remained Hidden For Four Years | date = 12 November 2015| publisher = Dark Reading | access-date= 13 November 2015}} 32. ^{{cite web | url = http://www.csoonline.com/article/2955297/cyber-attacks-espionage/newest-rig-exploit-kit-driven-by-malicious-advertising.html | title = Newest RIG exploit kit driven by malicious advertising | date = 3 August 2015| publisher = CSO Magazine| access-date= 3 August 2015}} 33. ^{{cite web | url = http://www.networkworld.com/article/2910913/new-malware-program-punkey-targets-pointofsale-systems.html | title = New malware program Punkey targets point-of-sale systems| date = 16 April 2015| publisher = Network World| access-date= 17 April 2015}} 34. ^{{cite web | url = https://www.us-cert.gov/ncas/alerts/TA14-212A | title = Alert (TA14-212A) Backoff Point-of-Sale Malware| date = 31 July 2014| publisher = US-CERT| access-date= 8 April 2015}} 35. ^{{cite web | url = http://www.securityweek.com/reflected-file-download-new-attack-vector-enables-file-downloads-without-upload | title = Reflected File Download: New Attack Vector Enables File Downloads Without Upload| date = 14 October 2014| publisher = Security Week| access-date= 21 April 2015}} 36. ^{{cite web | url = http://www.securityweek.com/black-hat-europe-hijacking-clicks-same-origin-method-execution | title = Black Hat Europe: Hijacking Clicks With Same Origin Method Execution| date = 16 October 2014| publisher = Security Week| access-date= 21 April 2015}} 37. ^{{cite web | url = http://www.csoonline.com/article/2459925/malware-cybercrime/exposed-an-inside-look-at-the-magnitude-exploit-kit.html | title = Exposed: An inside look at the Magnitude Exploit Kit| date = 5 August 2014| publisher = CSO| access-date= 21 April 2015}} 38. ^{{cite web | url = http://www.zdnet.com/article/two-million-stolen-facebook-twitter-yahoo-adp-passwords-found-on-pony-botnet-server/ | title = Two million stolen Facebook, Twitter, Yahoo, ADP passwords found on Pony Botnet server| date = 4 December 2013| publisher = ZDNet| access-date= 21 April 2015}} 39. ^{{cite web | url = https://www.reuters.com/article/2014/02/24/us-bitcoin-security-idUSBREA1N1JO20140224 | title = 'Pony' botnet steals bitcoins, digital currencies: Trustwave| date = 24 February 2014| publisher = Reuters| access-date= 21 April 2015}} 40. ^{{cite web | url = https://threatpost.com/new-exploit-kit-redkit-discovered-wild-050712/76533 | title = New Exploit Kit RedKit Discovered in Wild| date = 7 May 2012| publisher = ThreatPost| access-date= 21 April 2015}} 41. ^{{cite web|url=http://energycommerce.house.gov/hearing/protecting-consumer-information-can-data-breaches-be-prevented |title=Protecting Consumer Information: Can Data Breaches Be Prevented? |date=5 February 2014 |accessdate=8 April 2015|publisher=United States House Committee on Energy and Commerce}} 42. ^1 {{cite web|url=https://bugzilla.mozilla.org/show_bug.cgi?id=724929 |title=Bug 724929 - Remove Trustwave Certificate(s) from trusted root certificates |date=7 February 2012 |accessdate=8 April 2015|publisher=Mozilla}} 43. ^{{cite web|url=http://www.darkreading.com/risk/compliance/target-pci-auditor-trustwave-sued-by-banks/d/d-id/1127936 |title=Target, PCI Auditor Trustwave Sued By Banks |date=26 March 2014 |accessdate=9 April 2015|publisher=Darkreading|first=Mathew J. |last=Schwartz}} 44. ^{{cite web|url=http://www.americanbanker.com/issues/179_58/banks-sue-security-vendor-trustwave-after-target-data-breach-1066493-1.html |title=Banks Sue Security Vendor Trustwave After Target Data Breach |date=25 March 2014 |accessdate=9 April 2015|publisher=American Banker|first=David |last=Heun}} 45. ^{{cite web|url=http://www.computerworld.com/article/2489325/technology-law-regulation/banks-withdraw-data-breach-claim-against-target.html |title=Banks withdraw data breach claim against Target |date=1 April 2014 |accessdate=9 April 2015|publisher=ComputerWorld|first=Jeremy |last=Kirk}} 46. ^{{cite web|url=https://www.reuters.com/article/2014/03/30/us-target-trustwave-lawsuit-idUSBREA2T01B20140330 |title=Security firm Trustwave says Target data breach claims baseless |date=29 March 2014 |accessdate=9 April 2015|publisher=Reuters}} 47. ^{{cite web |url=https://www.trustwave.com/Trustwave-Announcement/ |title=A Letter to our Valued Customers |date=29 March 2014 |access-date=9 April 2015 |archive-url=https://web.archive.org/web/20150318225031/https://www.trustwave.com/Trustwave-Announcement/ |archive-date=18 March 2015}} 48. ^{{cite web|url= https://www.msspalert.com/cybersecurity-research/gartner-magic-quadrant-for-managed-security-services-2018-analysis/ |title= Gartner Magic Quadrant Analysis |accessdate=4 July 2018 |date=1 March 2018 |publisher=MSSP Alert}} 49. ^{{cite web|url= http://www.marketwired.com/press-release/trustwave-named-leader-idc-marketscape-emerging-managed-security-services-providers-2155341.htm |title= Trustwave Named a Leader in IDC MarketScape for Emerging Managed Security Services Providers |accessdate=12 September 2016|date=2 September 2016|publisher=Marketwired}} 50. ^{{cite web|url= http://www.marketwired.com/press-release/trustwave-named-challenger-2015-gartner-magic-quadrant-global-managed-security-service-2085316.htm |title=Trustwave Named a Challenger in 2015 Gartner Magic Quadrant for Global Managed Security Service Providers|accessdate=17 January 2016|date=4 January 2016|publisher=Marketwired}} 51. ^{{cite web|url=http://www.trustwave.com/Company/Newsroom/News/Trustwave-Named-a-Leader-in-Managed-Security-Services-by-Independent-Research-Firm/|title=Trustwave Named a Leader in Managed Security Services by Independent Research Firm|accessdate=9 April 2015|date=24 November 2014|publisher=Trustwave}} 3 : Computer security software companies|Networking companies|Server appliance |
随便看 |
开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。