Microdasys XSG XML Security Gateway

2. Microdasys completes your
Internet security solution
through total visibility into
your web content and data
origin and uncovers all threats
hidden by SSL and XML
encryption.
WHY MICRODASYS
Source: www.programmableweb.com
Internet Security
through complete
YOURCOMPANYY visibility into web
content and data origin

3. Cloud Computing, by design, mandates
SSL encryption for confidentiality and XML encoding
for API communication and conformity.
Cloud computing therefore leads to “Always-On SSL” and
pervasive XML encoded data exchange.
This data is invisible to your network defense and data loss
prevention systems.

4. “SOAP goes through firewalls like a
“Payload and Content threats use XML as a
knife through Butter”
carrier for malicious code and content. As with
every technology evolution and revolution new
and continuously evolving threats abound.
These threats equally target our systems, data,
and users.”
Tim Bray, Editor of the XML Specification
Steve Orrin, Director of Security, Intel Corp.
Expert Talk
“Feeds, when consumed directly by client side
applications can be dangerous. “XML based feed content (RSS/ATOM)
XMLHttp and XMLHttpRequest APIs can be used is susceptible to traditional attacks such as
to perform port scanning, make network calls and Code/SQL/LDAP injection, OS commanding,
other IO operations as a privileged user. Buffer Overflow and content spoofing.”
As feeds are consumed programmatically, with
the above kind of threats, zero-day attacks can be
launched.”
Shivaram H. Mysore
W3C XML Security Specs Working Group.

5. 6,000 APIs: It’s Business, It’s Social and It’s Happening Quickly
“The last 1,000 APIs in our directory were added
in the shortest time ever. It was just over three months ago
that we reached the 5,000 API milestone.”
www.programmableweb.com May 2012

6. REST, SOAP, XML and ATOM/RSS Dominate Web APIs
Source: www.programmableweb.com

7. Company Issued or BYOD – Mobile Devices Invade Corporate Networks
And with them more than half of a million Apps

8. There’s An App For That…………!
Mobile

9. Web Services Managed Through XSG
Block or Allow
specific functions
of any Web
Service

10. Microsoft SkyDrive iPhone App – Managed Through XSG
Login to Sky
Drive blocked
by XSG

11. US Navy iPhone App – RSS Feed Managed Through XSG
RSS Feed
consumption in
Navy App
blocked by XSG

12. Summary
XSG protects mobile devices, desktops and networks through:
• Automatic Detection, Analysis and Central Management of Web Services
• Decoding of XML data for inspection by Content Security Devices
• Block / Allow of specific functions of a Web Service (i.e. “Download”)
• Automatic Detection and Central Management of RSS/Atom web feeds
• Decoding of RSS/Atom enclosures for content inspection
See www.microdasys.com for more information and a free 30 day trial version