WAPPLES The Intelligent Web Application Firewall Penta Security

WAPPLES 소개 The Intelligent Web Application Firewall Penta Security Systems Inc. | July, 2012

Table of Contents q 펜타시큐리티 소개 q 웹방화벽의 필요성 q 웹방화벽 소개 q 지능형 웹방화벽 WAPPLES q WAPPLES 판매 현황 q 인증 및 수상현황 q 구축사례 q WAPPLES Appliances q WAPPLES 모델별 성능 WAPPLES Introduction & the Future 2

Table of Contents WAPPLES Introduction & the Future 3

웹방화벽 소개 보안 장비별 탐지현황 비교 Network Firewall IDS / IPS WAF A 1: SQL Injection X △ √ A 2: Cross Site Scripting (XSS) X △ √ A 3: Broken Authentication and Session Management X △ √ A 4: Insecure Direct Object References X X √ A 5: Cross Site Request Forgery (CSRF) X X √ A 6: Security Misconfiguration X X √ A 7: Failure to Restrict URL Access X X √ A 8: Insecure Cryptographic Storage X X √ A 9: Insufficient Transport Layer Protection X √ √ A 10: Unvalidated Redirects and Forwards X X √ OWASP Top 10 (2010) * OWASP Top Ten Web Application Security Vulnerabilities(2010) WAPPLES Introduction & the Future 12

지능형 웹방화벽 - WAPPLES PORT 23 Close PORT 80 Open WAPPLES 네트워크 방화벽 웹 어플리케이션 방화벽 웹 서버 웹어플리케이션 보안 WAPPLES Introduction & the Future 14

지능형 웹방화벽 - WAPPLES 기능 (1) ü 논리 분석형 탐지엔진 • ü 로직 분석 및 다중탐지기법을 통한 HTTP/HTTPS 기반의 웹 공격 탐지 1 Buffer Overflow 2 Cookie Poisoning 3 Cross Site Script 4 Directory Listing 5 Error Handling 6 Extension Filtering 7 File Upload 8 Include Injection 9 Input Contents Filtering 1 0 1 1 1 2 1 3 1 4 1 5 1 6 1 7 1 8 Invalid HTTP Invalid URI IP Filtering Parameter Tampering Privacy File Filtering Privacy Input Filtering Privacy Output Filtering Request Header Filtering Request Method Filtering 1 9 2 0 2 1 2 2 2 3 2 4 2 5 2 6 2 7 Response Header Filtering SQL Injection Stealth Commanding Suspicious Access Unicode Directory Traversal URI Access Control User Defined Web Site Defacement IP Block 정책기반 설정 제공 • • 기본 정책을 바탕으로 자유로운 설정 지원 정책 편집 (추가, 불러오기, 수정) 기능 WAPPLES Introduction & the Future 16

WAPPLES 판매현황 WAPPLES 국내 판매현황 q 한국에서 2008년 이후로 시장점유율 1위를 유지하고 있다. q 고객: = 주요 정부 기관, 대학, 도서관 = 주요 은행, 보안, 증권회사 = 건설, 병원, e-비즈니스, 신문, 게임 제공업자, 교회, 영화관 등 다양한 산업 분야 (Units) 1400 Etc. 11% 1200 Trinity Soft 11% 1000 800 600 Piolink 16% 400 Pent a 62% 200 0 2005 2006 2007 2008 2009 2010 2011 (Year) Sales of WAPPLES (since launching) WAPPLES Introduction & the Future Percentage of the WAF market in 2011 20

WAPPLES 모델별 성능 Class Model Value WAPPLES-50 Performance WAPPLES-100 WAPPLES-500 eco High-End WAPPLES-1000 type 2 WAPPLES-2000 WAPPLES-5000 Appearance Capacity Maximum Throughput 100 Mbps 300 Mbps 500 Mbps 2 Gbps 4 Gbps 6 Gbps HTTP Transactions/sec 3, 000 9, 000 15, 000 30, 000 50, 000 70, 000 SSL Transactions/sec 2, 000 5, 000 8, 000 15, 000 24, 000 33, 000 Form Factor 1 U 1 U 1 U 2 U 2 U 2 U CPU Intel Dual Core 2. 5 GHz Intel Quad Core 2. 66 GHz Intel Quad Core Xeon 2. 66 GHz Memory 4 GB 8 GB 16 GB 24 GB HDD 160 GB 500 GB 1 TB Dimensions 443 mm/292 mm/44. 5 mm 443 mm/406 mm/44. 5 mm 443 mm/512 mm/88 mm 431. 8 mm/580 mm/88 mm Weight 8 Kg 11 Kg 18. 75 Kg 21 KG Hardware • 2 x 10/1000 Base. TX • 4 x 10/1000 Base. TX • 2 x 10/1000 Base. TX • 8 x 10/1000 Base. TX Bypass Intel Quad Core Xeon 2. 33 GHz * Intel Quad Core Xeon 2. 66 GHz 2 *2 • 6 x 10/1000 Base. TX • 8 x 10/1000 Base. TX Bypass • 2 x 1000 Base. SFP OR NIC • 2 x 1000 Base Optical Bypass • 2 x 10/1000 Base. TX (Optional) • 2 x 1000 Base Optical Bypass Power Supply AC 100~240 V 50/60 Hz 200 W AC 100~240 V 50/60 Hz 300 W AC 100~240 V 50/60 Hz 400 W Redundant Power Supply WAPPLES Introduction & the Future Intel Westmere 2. 53 GHz * 2 • 2 x 10/100/1000 Base. TX • 8 x 10/100/1000 Base. TX Bypass • 4 x 1000 Base. SFP • 2 x 1000 Base Optical Bypass (Optional) • 4 x 1000 Base Optical Bypass • 2 x 10 G Base Optical Bypass (Optional) • 2 x 1000 Base Optical Bypass AC 100~240 V 50/60 Hz 400 W Redundant Power Supply AC 100~240 V 50/60 Hz 500 W Redundant Power Supply 27

WAPPLES V-Series 모델별 성능 WAPPLES Introduction & the Future 29

WAPPLES MS 모델별 성능 WAPPLES Introduction & the Future 31

감사합니다. Penta Security Systems Inc. Hanjin Shipping Bld. 20 F, Seoul, Korea TEL: 82 -2 -780 -7728 FAX: 82 -2 -786 -5281 www. pentasecurity. com Penta Security Systems K. K. 赤坂 区 東京都浜田 3 -2 -8アセンド赤 坂3階 TEL: 81 -3 -5573 -8191 FAX: 81 -3 -5573 -8193 WAPPLES Introduction & the Future 32