eEye to Showcase IT Security Solutions That Simplify Vulnerability and Compliance Management at SecureWorld Expo in Philadelphia

Security Industry Leader to Promote Free Resources and Share Research-based Configuration Best Practices at Booth 406, May 11-12, 2011

Phoenix, AZ (PRWEB) May 04, 2011

eEye Digital Security, a provider of IT security and unified vulnerability management solutions, will exhibit at the SecureWorld Expo at the Valley Forge Convention Center in King of Prussia, Philadelphia, May 11-12, 2011.

eEye invites the media and SecureWorld Expo attendees to explore the company’s latest innovations, demonstrated in Booth 406, primarily the company’s Retina CS Management solution, Retina Insight reporting engine, as well as add-on modules for Configuration Compliance, Government Regulatory Reporting, and Patch Management.

eEye CTO, Marc Maiffret, will offer insights on the Industry Expert Panel, “Network Security: Finding the Right Management Program,” to be held on Wednesday, May 11, 1:15-2:00 PM in the Presentation Theatre.

“The eEye team looks forward to discussing the benefits of the Retina solution suite with SecureWorld Expo attendees, as well as promoting newly released free resources.” said Marc Maiffret, CTO, eEye. “The newest of eEye’s free tools is a research report on configuration best practices, designed to provide practical, straightforward system configuration changes that can dramatically improve security posture. We hope our research findings will directly benefit conference attendees.”

eEye will also encourage SecureWorld Expo attendees to take advantage of other free, online resources that the company provides to the IT security community. Retina Community is a free vulnerability scanner for up to 32 IPs, now being used by nearly four thousand organizations. Zero Day Tracker provides a catalogue of the newest zero-day vulnerabilities, instructions for quick remediation, and a historical record of past vulnerabilities. eEye’s Vulnerability Expert Forum (VEF), hosted by Maiffret and the eEye Research Team, is a popular monthly webinar attended by hundreds of IT security professionals seeking insight and information on recently announced critical vulnerabilities from Microsoft and other software vendors.

eEye is participating in SecureWorld Expo’s “Dash for Prizes.” Attendees can register at the eEye Booth (406) throughout the two-day conference to win an Amazon Kindle and a $25 gift card. Winners will be announced during the last break of the conference on Thursday, May 12. Attendees must be present to win.

About eEye Digital Security
Since 1998, eEye Digital Security has made vulnerability and compliance management simpler and more efficient by providing the only unified solution that integrates assessment, mitigation, protection, and reporting into a complete offering with optional add-on modules for configuration compliance, regulatory reporting, and integrated patch management. eEye’s world-renowned research and development team is consistently the first to uncover critical vulnerabilities and build new protections into our solutions to prevent their exploit. Thousands of mid-to-large-size private-sector and government organizations, including the largest vulnerability management installations in the world, rely on eEye to protect against the latest known and zero-day vulnerabilities. More at eeye.com.

 

Banks Mining Social Networks with Analytics Tools

Frank Eliason thinks of social media sites such as Twitter, Facebook and LinkedIn as customers’ living rooms. “You have to wait to be invited in,” says the SVP of social media at New York-based Citi. “You want to deliver content that’s important to your fans. As you follow what they’re sharing and commenting on, that tells you which content is working and which is not.”

Dan Marks, chief marketing officer at First Tennessee in Memphis, views social media as a big cocktail party. You want to go and listen, find out what people are saying, maybe jump in with a comment or a witty quip once in a while — but you don’t get to control the conversation or pitch products, he says. “It’s a great indicator of word of mouth.”

The point is, on social media sites, thousands of conversations are going on, and some of them are about your bank. (Actually, it’s often more of a random spewing of personal opinions, thoughts and article links to an audience that may or may not be listening.) Within this mass of communication lies a wealth of useful information for banks — insights into where they’re falling short in customer service; which products, websites and mobile apps customers love or hate; what their share of voice is compared to competitors (that is, how often they’re mentioned versus their competitors); and how their marketing messages are coming across.

Banks such as Citi, SunTrust, First Tennessee and ING Direct not only are listening to the conversations and chiming in where appropriate, they’re analyzing the conversations to uncover ways to improve their business, with the help of monitoring and analytics software. “A year ago, banks thought their customers might be in social media sites and that there might be a few people talking about their banking experience online, but it wasn’t enough to necessitate a strategy,” observes Zach Hofer-Shall, an analyst at Forrester Research. “Now, just 12 months later, it’s big, and a lot of banks are doing something. But a lot of what they’re doing is behind-the-scenes research or measurement.”

An Active Social Life

Some software products in the space are multitasking — they provide a console for responding to social media comments as well as reports and analytics. Toronto-based ING Direct Canada (US$37.6 billion in assets) has about 19,000 fans and followers of its Twitter and Facebook pages. Under the name SuperStarSaver, the bank’s social media team tweets and posts comments to customers and prospects about their financial challenges. The messages are often offbeat.

“Quirky taglines are part of our culture,” says Mark Nicholson, head of digital and interactive at ING Direct Canada. “The intent is not to sound like a bank, but to speak the way a retailer would. It’s embedded in the DNA of what we call the ‘Orange Culture.'”

The bank uses Austin, Texas-based Spredfast to collaborate and participate in social networks. “Our folks aren’t directly on Facebook — they’re on Spredfast, which allows us to audit and track all those interactions,” Nicholson says, noting that the SaaS solution helps the bank scale its social media engagement and manage the workload.

Spredfast also helps the bank monitor its interactions, “so we don’t say something on a social network that we shouldn’t be saying,” and for compliance, Nicholson adds, pointing to proper disclosures as an example. A built-in workflow executes an approval process, he explains.

Citi’s ($1.9 trillion in assets) social media team uses Indianapolis-based ExactTarget’s CoTweet to engage with customers. “You assign responses to people, which is extraordinarily useful,” the bank’s Eliason says. And the solution tracks the conversation, so if one customer service representative starts an interaction with a customer and then his shift ends, another rep can see what transpired. “That’s important,” Eliason adds.

To manage Facebook interactions specifically, Citi uses New York-based Buddy Media. “When you’re looking at managing your wall in Facebook, you have to look at your publishing capabilities — how easy is it to put content up there?” Eliason says, noting that the software also helps the bank manage widgets on its Facebook wall. (For more on Citi’s use of social media, see related article, page 24.)

SunTrust ($172.9 billion in assets) also uses ExactTarget’s CoTweet to manage social media conversations and obtain metrics for its three Twitter handles: @suntrust for general bank information, @asksuntrust for customer service inquiries and @livesolid for conversations about finances and savings. “From a workflow management perspective, if you have multiple accounts and different contributors under those accounts, you want to have an easy way to identify a mention and assign it to someone,” says Bianca Buckridee, the Atlanta-based bank’s social media engagement manager. “That’s what CoTweet does.”

It also provides background information, she says — including the commenters’ bios and geographic locations, if available, their blog and/or websites and past tweets — to help the social media team decide whether or not to respond and to determine an appropriate answer.

Mashery Raises $11 Million

Mashery has raised $11 million in funding.  OpenView Venture Partners led the round that had participation from existing investors: Cisco, Formative Ventures, First Round Capital and .406 Ventures. Mashery plans to use the financing to broaden its current offering and to expand its sales and marketing activities. Mashery is a San Francisco, Calif.-based provider of Application Programming Interface management tools and services.

PRESS RELEASE

Mashery, the leading provider of API (Application Programming Interface) management tools and services, announced today that it has raised $11 million in funding led by OpenView Venture Partners. Existing investors Cisco, Formative Ventures, First Round Capital and .406 Ventures also participated in this funding round. The company will use the financing to broaden its current offering to meet the needs of increasingly more sophisticated and business critical API programs as well as to expand sales and marketing activities in key vertical markets.

Mashery provides on-demand API infrastructure enablement and management for over 100 leading brands in key verticals like media, retail, travel, business services, geo-local services and finance. The Mashery network of developers has more than doubled to over 100,000 since Q1 of 2010 and the number of live applications built on Mashery-powered APIs has grown 150% to 25,000 in the past six months alone.

“We have entered the post-website era, where companies are increasingly less likely to reach their customers through a browser-based website. In an world of apps, mobile devices and new online distribution channels, it is essential that APIs – the building blocks of all apps – are offered in a secure, scalable and measurable way,” said Oren Michels CEO and Co-founder of Mashery. “This investment and our partnership with OpenView will allow us to extend our leadership in API management and meet the increasingly complex challenges of high-volume, secure and high-availability APIs that power business critical applications.”

2011 introduced an entirely new array of connected devices, from millions of connected tablets to 52% penetration of internet-enabled gaming devices. By providing secure, managed access to data and services, APIs allow for accelerated development of mobile and social applications by internal, partner and external developers. Companies like Netflix, Best Buy, The New York Times, Expedia, The Guardian and Hoover’s have successful API programs that have enabled competitive differentiation in their respective industries.

Mashery’s API management tools and strategic services help companies connect with customers and partners in a changing digital world by extending reach across devices, markets and the Web. Mashery leads the industry with a holistic approach for API initiatives — from defining platform strategy and measuring business objectives to the heavy lifting of providing and managing infrastructure to facilitating relationships with our 100,000 strong network of Web and mobile application developers. Mashery provides knowledge, experience and proven strategies to enable over 100 leading brands to focus on their core business while driving sales, building new revenue channels and realizing faster time-to-market for innovative applications. Mashery was founded in 2006 and has built an impressive list of clients that include Best Buy, Netflix, and The New York Times. For more information, visit www.mashery.com.

Valley firms join $11M Mashery round

Mashery Inc., a provider of Application Programming Interface management tools and services, said Thursday it raised $11 million in new funding.

The round was led by Boston-based OpenView Venture Partners.

Also participating were San Jose-based Cisco Systems Inc. (NASDAQ:CSCO), Menlo Park-based Formative Ventures, San Francisco-based First Round Capital and Boston-based .406 Ventures.

Mashery provides on-demand API management for brands in media, retail, travel, business services, geolocal services and finance.

The San Francisco-based company was founded in 2006 its client roster includes Los Gatos-based Netflix Inc. (NASDAQ:NFLX).

Read more: Valley firms join $11M Mashery round | Silicon Valley / San Jose Business Journal

Mashery Raises $11 Million

Mashery, a provider of application programming interface management tools and services, has raised $11 million in a funding round led by OpenView Venture Partners, with existing investors Cisco Systems, Formative Ventures, First Round Capital and .406 Ventures also participating.

APIs enable companies to securely manage access to data and services by internal, partner and external developers, thus allowing for accelerated development of mobile and social applications.

Founded in 2006, San Francisco-based Mashery has raised a total of $24.6 million. It’s clients include Netflix, Best Buy, The New York Times, Expedia, The Guardian and and Hoover’s, and the company says the number of live applications built on its technology has grown 150 percent to 25,000 in the past six months.

Co-founder Oren Michels is CEO.

Deals & More: GoPro snaps up funding for wearable cameras

Today’s funding announcements include companies that develop cameras, distribute customer reviews and manage APIs:

GoPro brings in funding for action video recorders: The developer of the HD HERO line of wearable and gear mountable cameras has raised has raised an undisclosed yet “substantial” round of funding from Riverwood Capital, Steamboat Ventures, U.S. Venture Partners, Sageview Capital and Walden International. The company, based in Half Moon Bay, Calif., is popular among pro athletes, pro video producers and consumers alike for its cameras and accessories, which will now be sold in all Best Buy stores nationwide.

PowerReviews raises $10M to generate customer feedback: The customer review service has raised a new round of funding led by Four Rivers Group with participation from Woodside Fund, Menlo Ventures and Tenaya Capital. Based in San Francisco, the company provides the technology for user-generated reviews to more than 5,000 retailers including Brookstone, Drugstore.com and Diapers.com.

Mashery gets $11M to manage APIs: The provider of tools and services for API (application programming interface) management has raised a fourth round of funding led by OpenView Venture Partners with participation from existing investors Cisco, Formative Ventures, First Round Capital and .406 Ventures. The San Francisco company, which was founded in 2006, today has a network of more than 100,000 developers and has more than 100 clients including Netflix, The New York Times and CNET.

Newtopia grabs seed funding to whip you into shape: The personalized health coaching service has raised an undisclosed amount of seed funding from BDC Venture Capital and Canadian angel investors, peHUB reports. Founded in 2008, the company provides lifestyle management advice to users in the form of individualized health plans, coaching support and exercise help.

Companies: .406 Ventures, Cisco, First Round Capital, Formative Ventures, Four Rivers Group, GoPro, Mashery, Menlo Ventures, Newtopia, OpenView Venture Partners, powerreviews, Riverwood Capital, Sageview Capital, Steamboat Ventures, Tenaya Capital, U.s. Venture Partners, Walden International, Woodside Fund

Mashery Secures $11 Million for API Management Tools

Mashery, a provider of API management tools for Web and mobile application developers, said on Thursday that it has raised $11 million in new funding, led by OpenView Venture Partners.

Previous backers Cisco, Formative Ventures, First Round Capital and .406 Ventures also participated.

Founded in 2006, San Francisco-based Mashery provides on-demand API infrastructure enablement and management for over 100 brands, including Best Buy, Netflix and The New York Times.

The company counts a network of more than 100,000 developers.

Mashery will use the funds for additional product development, and to expand sales and marketing in key vertical markets.

Companies can take steps to fix flaws without patches

In a new report, eEye found that upgrading to the latest major release versions of Microsoft software would have mitigated close to 50% of all Microsoft vulnerabilities identified in 2010.

“If you had been running Windows 7 on your workstation, versus Windows Vista or XP, in 2010, you would have protected around 49% of all Microsoft vulnerabilities that year, which is a pretty staggering number when you look at how much time you can get back from an IT perspective”, Maiffret told Infosecurity.

The report also found that having a properly configured proxy server would have prevented information from being stolen by the Aurora virus, because it was not proxy aware.

“If you were to set up your environment to restrict all outbound network traffic except for web-based traffic, which you forced to go through an authenticated web proxy…you still might be compromised, but the way the malware tries to communicate back to the control server is in a lot of cases not proxy aware, so it not going to be able to communicate out of your environment”, Maiffret observed.

In addition, the report found that Windows 7 used in conjunction with access control lists could have prevented a worm such as Stuxnet from spreading once it was inside a system.

“Just by having proper file provisions on locking down the different folders of Windows, in this case the task scheduler drops folder, by restricting it so only administrators can create new jobs, you would essential mitigate…one of the vulnerabilities attacked by Stuxnet”, Maiffret said.

In addition, disabling WebDAV, WebClient Services, and MS Office Converters would have prevented 12% of all vulnerabilities patched by MS in 2010 from being exploited, the report found.

“WebDAV is being used as a way for attackers to be able to attack different vulnerabilities within your every day client application software”, Maiffret said, adding that organizations should assess where WebDAV is needed and disable it in places where it is not needed.

“So much of our focus in security revolves around the latest threat of the moment, whatever folks are worried about, such as the high profile attacks of Aurora or Stuxnet. While those things are going to be interesting to cover, there seems to be a void in getting out specific examples that folks working in IT can do to better protect their systems….That is the purpose of this research”, Maiffret concluded.