Webroot Web Security SaaS A Better Approach to Web Security Paul Jakobsen Webroot, Inc

Webroot Web Security SaaS A Better Approach to Web Security

Paul JakobsenWebroot, Inc.

Webroot Software, Inc. Friday, April 21, 2023

The Best Security in an Unsecured World.TM

2

Agenda

• About Webroot• The Evolving Threat Landscape• The Shift to Security as a Service• Webroot Web Security SaaS• Q&A



3

Agenda




44

About Webroot

• Largest Private Security Company in NorthAmerica▪ Years in Business: 11▪ Employees: 340+▪ Headquarters: Boulder, Colorado▪ Sales and Support Offices: US, UK, France,

Germany, Australia, & Japan▪ Growth: Avg. 40% Net Income Growth (YoY) since

2005

• Broad Security Portfolio:• Business:

• SaaS: Email, Archiving and Web Security Solutions• Endpoint: Antispyware and Antivirus Solutions

• Consumer:• Anti-Spyware: Webroot Spy Sweeper• Consumer suites: Webroot AntiVirus, Internet

Security Essentials• Parental controls, personal privacy, online back-up

products



5

Agenda




Evolving Threat Landscape

► Rise in Web 2.0 Applications

►Major Source of Data Loss

Internet Use Model has Changed

► IT Spending in Decline

► Lack of IT Resources to Handle Threat Environment

Economic Turmoil

► Email Threats Focused on Spam

► Hackers/Malware Writers Now Focused on Web

Web is Primary Attack Vector

► Traditionally Targeted at Employee Productivity

► Low Adoption of Web Security Solutions

Shift in Market Focus



Threat Landscape: Shift in Email Threats

• Decrease in Malware Delivered via Email

• Increase in Spam as a Percentage of Email Traffic

7 Source: Sophos/Webroot, 2008



Threat Landscape: Increase in Web Attacks; Insufficient Protection

8

SecurityRisk!

Source: Webroot, 2008



Threat Landscape:The Number of Malicious Sites is Increasing

• Percentage of Google search queries that resulted in at least one malicious URL

9

Source: “All Your iFRAMEs Point to Us,” Google, Feb. 4, 2008



Web 2.0 Presents New Challenges

• Social and Participatory Dimensions Create New Risks▪ Web mail/Web postings account for 37% of information leaks (IDC,

2008)

▪ 62% of companies allow access to social networking sites (Gartner 2008)

▪ MySpace, Facebook and Bebo have become vehicles for distributing malware

10

Social Networking

Content Syndication

Content Sharing

Blogs

RSS



Changing Economic Environment

• IT Departments Are Being Forced to React

11

Source: Webroot, 2008



IT Security Departments Already Stretched

12

Source: Forrester, Enterprise And SMB Security Survey, North America And Europe, Q3 2007

Top Challenges for IT Security Departments

IT organizations are struggling to handle the complex nature of today’s threat environment!



13

Agenda




SaaS is Not New – Business Runs on SaaS

14

CRM ContentManagement

Web Collaboration

Storage/Archiving HR/Payroll

Vulnerability Assessment

“The appeal is obvious: SaaS is quicker, easier and cheaper to deploy than traditional software, which means technology budgets can be focused on providing competitive advantage, rather than maintenance.” – The Economist, April 20, 2006.



Cost Advantages of SaaS

“SaaS can reduce the cost of implementing and supporting an application by 60 percent and lower an organization’s TCO by 5 to 7 percent.”

Source: Gartner: TCO of Traditional Software Distribution vs. Application Virtualization. April 16, 2008.

Sources: Software and Information Industry Association (2006) and Webroot (2008)



Advantages Over On-Premise Solutions

16

SaaS On-Premise

No hardware/software to purchase or mange

Hardware purchase and management required

Easy to deploy Lengthy deployment process

Lower total cost of ownershipHigh capital and replacement

costs

Application managed by experts

On-site management required

Easy to scale/unlimited capacity

Additional HW purchase required

Flexible platform – ability to add/subtract technologies

No flexibilityDifficult to change configuration

Guaranteed service performance (SLAs)

No guarantee if HW/SW fails



Convergence of SaaS and Security

17



18

Agenda




19

Webroot Security ApproachCustomer

Environment

Internet

Webroot Endpoint Security

Web Traffic

Email Traffic

Webroot Security Software as a Service (SaaS)

Threat Protection

•Anti-spam•Anti-virus•Anti-spyware•Anti-phishing•DDoS/DHA

Business Enablemen

t

•URL Filtering•Message Continuity•Mobile User Protection

Data Security

•Content Scanning•Application Control•Encryption

Compliance

•Archiving•Compliance Dictionaries•Secure Storage

Webroot Email Security SaaS

Webroot Web Security SaaS

Mobile Users

•Anti-Virus•Anti-Spyware•Application Control

Webroot Global Datacenter Network

Webroot Archive Service



Webroot Web Security SaaS

InternetWeb

Content Host

Inbound Web Traffic

CustomerEnvironment

X

X

Webroot Security SaaSDatacenter

Outbound Scanning - URL Filtering by Policy - URL Allow/Deny Lists - Application Control - File Type Blocking - ‘Scan Ahead’ Search

Inbound Scanning - Virus Scanning - Spyware Scanning - Phishing Site Analysis - Content Control

Outbound Web Traffic

Admin

Clean Web

Traffic

Mobile Users



Web Security SaaS Features & Benefits

21

Features Benefits

Inbound scanning for virus, spyware, phishing attacks

Block viruses and spyware before they infect your network

Seamless authentication for roaming end-users

Apply security policy to mobile users, regardless of location

URL filtering/custom allow and deny lists

Enforce company Internet acceptable user policies

Application and file type blocking

Prevent loss of company and personal data

Intuitive web management portal

Easy to set and manage end-user policies and report on

activity



22

Web Admin Console: Dashboard



23

Web Admin Console: Policy Creation

• Control web access policies based on site category and time period

• Allow, deny, or coached access

• Customized allow and deny lists

• Set access based on account, group, or individual user



24

Web Admin Console: Reporting

• Real-time Management Dashboard▪ Top categories▪ Spyware/malware

sites▪ Top search terms

• Ad-hoc and Scheduled Reporting▪ Reports based on:

• Bandwidth• Site category/URL• Time frame• Account, Group or

User level reporting

▪ Compare group data▪ Graphical reports▪ Scheduled for

delivery as PDF



2525

Web Threat Protection: Anti-spyware and Anti-virus

• Webroot Anti-spyware▪Powered by Webroot Spy

Sweeper technology▪Automated spyware

detection▪Blocks URLs with malware

characteristics▪Only SaaS solution with an

integrated anti-spyware engine

• Anti-virus Protection▪Signature detection

guarantees 100% virus protection

▪Heuristics protect against zero-day attacks



Web Filtering: URL Filtering Engine

• URL database of over 25+ million websites

▪Constantly updated

• Flexible policy management based on:▪12 main categories▪96 sub-categories

• URL reputational analysis▪Block URL’s based on site reputation

and potentially malicious behavior

• Create customized allow/deny lists for greater protection

26



Web Filtering: ‘Scan Ahead’ Search

• Apply Internet use policy to search results

• Results are color coded to denote access

• Access policy based on individual user

27



28

Web Filtering: Custom Blocked/Coached Pages



Web Filtering: Anti-phishing

• Advanced heuristics analyze website behavior to protect against new phishing attacks

29



Web Filtering: Proxy Bypass Sites



31

Roaming User Protection

• Apply Internet use and security policy to mobile users• No additional hardware or server software to manage• Enables roaming user authentication from anywhere

without having to establish VPN connection• Integrated component of service



32

Global Coverage and Infrastructure



Questions?

Paul [email protected]

33

Documents

Webroot Web Security SaaS A Better Approach to Web Security Paul Jakobsen Webroot, Inc