VISIÓN DE CIBERSEGURIDAD 360° BY RADWARE - ROY ZISAPEL CEO de Radware

🎥 Dec 01, 2021 📺 MAPS Disruptivo ⏱ 11m 👁 1067 views

VISIÓN DE CIBERSEGURIDAD 360° BY RADWARE ROY ZISAPEL CEO de Radware Conoce como Radware asegura para las empresas el que sus aplicaciones estén disponibles todo el tiempo, además de tener los datos seguros contra ciber ataques y como lograr unas transición a la nube de sus cargas de trabajo, manteniéndolas seguras contra ataques, amenazas y configuraciones incorrectas. Conversaremos como distintos analistas nos ubican como el líder en cada uno de los segmentos en los que Radware participa. Conocerás como se están dando ataques DDoS en el mundo y cómo Radware nos protege. Conoce más de IT S...

Watch on YouTube

About Roy Zisapel

In a 2021 presentation, Roy Zisapel described Radware’s focus on three areas: ensuring application availability, protecting data against cyber attacks, and securing cloud workloads. He stated that Radware had blocked close to 500,000 DDoS attacks and identified nearly six billion bot requests in real time. Zisapel attributed attacks to organized crime, nation-state actors, competitors, and activists, and noted that Radware’s solutions are resold by companies including Cisco and Check Point. In an April 2020 address, Zisapel discussed the impact of the COVID-19 pandemic on internet traffic and work patterns, observing a 40% traffic increase in the U.S. and doubled traffic in some European countries. He said that remote access had become the most critical IT resource and that organizations must ensure its availability and security. Zisapel also noted that governments were using mobile applications to track the spread of the coronavirus, which he described as challenging the balance between public health and individual privacy. He reported a rise in DDoS attacks and sophisticated bot traffic during the pandemic.

Source: AI-verified profile updated from Roy Zisapel's recent appearances. Browse all interviews →

Transcript (14 segments)

Roy Zisapel0:04

Good morning everyone, and I'm very happy to be here as a guest of MAPS in this conference. It's my honor to present Radware's solutions to you.

So what we are doing at Radware is three mainstays. We are making sure your applications are all the time available with our application delivery controller solutions, and that always user traffic is going to an available server. And lastly, we're keeping your data secure by protecting the applications against cyber attacks with our web application firewall and our bot security solution. And last but not least, as you transition some of your workloads to the public cloud, we will protect your posture in the public cloud against attacks, threats, and misconfigurations.

I want to spend some words on Radware in Mexico. So first, we are highly investing in the local market. We have a local team in Mexico. We've added to our global support centers supporting Spanish to facilitate better and easier support for the Mexican market. And we are marketing our market-leading cybersecurity solutions for the country. We're targeting the larger enterprises, the financial sector, the telcos, the online and the government sectors, similarly to what we do globally.

When we're talking about threats and attacks, as I've mentioned, Radware is very focused about protecting the mission-critical applications. When we look who is the attacker, there can be many motivations and many types of attackers. It can be the organized crime, especially against financial institutions. It can be nation-state actors that are trying maybe to penetrate government or critical infrastructure resources. It can be competitors, especially in the online market, gaming, and e-commerce, that are trying to understand better pricing, to scrape the site, and so on. And it can be activists, especially as it relates to political ideology, elections, and so on. So the world is not short of motivation, and this is why we're seeing so many cyber attacks against mission-critical infrastructure and applications around the world.

In this slide, you can see that not only those many attacks, we're seeing them increasing in capacity, increasing in complexity. For example, in the last quarter, we're seeing a 20% increase in application attacks, 15% in burst attacks, DNS attacks, and so on. And it's quarter after quarter in a very fast pace. We can also see that the damage is huge. Hundreds of millions of records of sensitive information, of personal information, is constantly being stolen. IP is being stolen, applications are brought down and creating downtime. And those are the challenges that we at Radware are helping you to overcome.

How do we do that? We've created a complete application and data center security stack. On the left side, we are protecting anything that's coming from the outside to your application and data centers against all the spectrum of attacks. It can be DDoS protection against floods, it can be our web application firewall against application attacks, bot manager against robots and automated attacks, and also threat detection and API protection against API attacks. On the right side, if you're deployed in one of the public cloud infrastructure, AWS, Azure, or Google, we will make sure that your application and posture of the cloud is protected.

Here are some of our statistics from last month about the attacks we were blocking. So we blocked close to 500,000 DDoS attacks across our customer base with 40 terabits of traffic. You can see astonishing sizes. Five billion, close to six billion bot requests or sessions we've identified in real time that they are bad and blocked them in real time, not allowing the hackers getting into our customer sites. And almost 300 million web transactions that we blocked in real time. And you can see it's across all segments: banking, online, high-tech, retailers, government, carriers, manufacturing. All are suffering greatly from the cyber attacks.

Here are some more statistics about the traffic we're blocking and also a live example. So on the right side, on the top, you can see an actual campaign against a stock exchange, a national stock exchange in Asia. And you can see that the attack was leaking. You can see here there's no blocking, just attack. However, when we installed our devices, you can see that we immediately started to block the attack and only the legit traffic was allowed to get in. What you can see here is a very sophisticated attack. You can see it's coming and going all the time. We call it a burst attack, and then it's very hard for the operator to block the attack as it's constantly changing and morphing. With our algorithms and capabilities, we were able to block this attack in real time.

We have also a lot of experience now already in Latin America and in Mexico, where we're blocking in real time for many of the airlines in the continent bad bot attacks. We've just mitigated a 150-gig attack for a government of one of the countries in Latin America. So one of the large telcos, we're actively fighting against their bot attacks. And you can see other examples around the world: technology company over 300 gig of DDoS attack, banking with very large attacks, and the stock exchange I referred to.

One of the big things we're doing for our public cloud customers is really protecting their posture or their workloads against misconfigurations, meaning things that were configured wrongly and a hacker can exploit. We're helping them to tighten the privileges, so even if a hacker comes in, the damage you can create is limited and confined. And we are protecting in real time and detecting whether someone is trying to break in and alerting them. So really an end-to-end protection from DDoS to WAF to bot security and public cloud security.

Here you can see some of our global cloud security network. This one is the DDoS scrubbing centers. And generally for customers in Mexico, we will scrub the traffic either in Ashburn or Dallas or San Jose or Brazil. And generally, we do that closer to the attacker. We take the attack traffic in, we clean it close to the attacker, and then we carry the clean traffic quickly to your site. We have over eight terabits dedicated to cleaning those attacks, one of the largest networks in the world, and the one that is most sophisticated, as I'll show you later, from an attack mitigation capability. When we're talking about application security, we have many, many nodes across the world, and we're opening more and more nodes every quarter to be closer to the customers. Here we will do the web application firewalling, the bot mitigation, and the API security closer to our customers.

In this slide, you can see what some of the analysts are saying about us. So for example, in Forrester, beginning of this year, you can see Radware positioned as the leader of all leaders in denial of service. In Gartner, we are customer choice for web application firewall. We are a strong performer in Forrester for web application firewall and a leader in quadrant for bot management. So analysts recognize our technology and execution advantage, and we are a leader in each and every category we participate in.

It also shows in our customers and partners. So for example, both Cisco and Check Point are reselling our solutions. The Cisco Radware solution is actually the Radware solution. The Check Point DDoS Protector and the Cloud by Check Point is the hardware and cloud solution respectively. And so goes for Nokia and some of the large systems. You can see who do we protect. So if you buy on eBay, if you pay PayPal, if you use Twitter, if your applications are using SaaS by Salesforce or SAP or Webex, all of those customers we are protecting day in and day out against attacks. In banking, many of the very large banks, Bank of America, Wells Fargo, HSBC Bank, rely on us to secure their datasets. And so in carriers, AT&T, Verizon, Bell Canada, Telefonica, etc., we are protecting them and we are part of their MSSP service.

With that, I would like to thank you for your time. I hope you will find the day very positive and constructive, and we look forward to engage with you and assist you together with MAPS to protect your mission-critical applications and the data centers. I'm sure that together we will be successful, and we look forward to partnering with you together. Thank you very much.