C Y B E R S E C U R I T Y

Transcription

1 I N N O V A T I O N F O R C Y B E R S E C U R I T Y E D I T I O N

2 Mission of the HexaTrust Club The HexaTrust club was founded in 2013 by a group of French SMEs that are complementary players with expertise in information security systems, cybersecurity and digital trust. Representative of French excellence in innovative solutions, these software vendors and Integrators have come together to provide a full range of efficient and consistent products and services dedicated to the security of critical infrastructures. This combination meets the needs of enterprises, administrations, public and private organizations of all sizes, keen to receive European and French innovative offers, covering all their IT security needs. Building on their presence on the European market, HexaTrust members also want to accelerate their international development by sharing their experience, their networks and means of access to global markets. HexaTrust act in close cooperation with professional organizations, users and institutional actors, working to strengthen the chain of Cybersecurity and Digital Trust groups, supporting the development of innovation and growth SMEs, future leaders of information security systems.

3 I N N O V A T I O N F O R C Y B E R S E C U R I T Y H E X A T R U S T Values & Commitments The core values of the club, based on five founding commitments are: Innovation, Union, Action Commitment #1 To facilitate exchanges and synergies among European and French software vendors and security services companies. Commitment #2 Promote and market a portfolio of innovative products and services, offering broad-spectrum coverage of risks for the protection of critical and vital infrastructures. Commitment #3 Develop and promote the skills and expertise of innovative French SMEs positioned on the information security systems, digital trust and cybersecurity markets to major private and public customers. Commitment #4 Encourage access to foreign markets through the organization of targeted joint marketing and business activities. Commitment # 5 Be the spokesperson for the French SMEs positioned on the markets of information security systems, digital trust and cybersecurity and act in act in coordination with public and private organizations representing users, professionals and governmental institutions.

4 Bertin IT HIGH ASSURANCE EAL 5 SECURE VIRTUALIZATION THREAT DETECTION EARLY WARNING Department of Bertin Technologies, Bertin IT designs and provides software solutions that meet the highest demands for information security and multimedia multilingual content processing. Its offer covers the security of sensitive information systems and critical infrastructures, and the deep analysis of multimedia multilingual open source data (Web, TV, radio) for OSINT and crisis management. BERTIN IT'S PRODUCTS PolyXene : EAL 5 certified high security hypervisor for protecting workstations, mobile devices and network WhiteN : USB threats neutralizer, standalone or connected to the infrastructure MediaCentric : open source contents advanced processing platform for preventing cyber threats, monitoring for vulnerabilities and fighting against cyber criminality MediaSpeech : automatic speech-to-text multilingual solution for indexing and analyzing audio & video contents BERTIN TECHNOLOGIES (HQ) 10 bis, Avenue Ampère Montigny-le-Bretonneux FRANCE Tel.: +33 (0) [email protected]

5 Brainwave ACCOUNTS REVIEW DATA QUALITY SEGREGATION OF DUTIES COMPLIANCE ENTITLEMENTS CATALOG ROLE MODELING Brainwave is a leader in fraud, data leakage and cyber espionage risk analysis. Excessive access rights, removal of access privileges, seggregation of duties are the top 3 problems found when external audits are made. They are at the source of huge fraud problems and data leakage problems. Brainwave solve this problem with an innovative analytics solution. Brainwave has been named Gartner Cool Vendor 2013, Brainwave Identity GRC is distributed through a network of consulting partners across Europe, Africa, Canada and the US. BRAINWAVE PRODUCT BRAINWAVE Identity GRC Installed on top of legacy provisioning systems or as a standalone application, it enables your organization to achieve sustainable compliance and empowers your business people with the tools needed to effectively manage their users. The Brainwave solution brings you a 360 view of all you users and their granular permissions. Its patented analytics engine automatically highlights all abnormal situations, thus helping you reducing fraud risks and data leakage risks. Brainwave is installed in days, it is connector less, it provides more than 200 reports out-of-the-box, and provides production ready remediation workflows and access-recertification workflows. BRAINWAVE (HQ) rue Galliéni Asnières-sur-seine FRANCE Tel.: +33 (0) Fax: +33 (0) [email protected]

6 DenyAll WEB APPLICATION FIREWALL VULNERABILITY SCANNER VIRTUAL PATCHING APPLIANCES DenyAll is a European software vendor, an expert in next generation application security, building on 15 years of experience securing web applications and services. The company grows organically and expands its portfolio through acquisitions such as VulnIT, a vulnerability management vendor, in July 2012 and BeeWare, another leading web application security vendor, in May DenyAll counts more than 600 customers around the globe. Their specific needs in application security are covered by its comprehensive range of solutions which, Detect IT vulnerabilities, Protect infrastructures against modern attacks targeting the application layer, Connect users to the applications which allows them to create and share information, Manage your security policies and get detailed logs and security alerts. The company leverages an ecosystem of value-added resellers, outsourcers, hosters and cloud providers. DENYALL FRANCE (HQ) 6, avenue de la Cristallerie, Sèvres FRANCE Tel.: +33(1) Fax: +33(1) [email protected]

7 Ercom SECURE MOBILE COMMUNICATIONS Ercom proposes CRYPTOSMART, a high-end solution to secure all mobile communications for corporations, administrations and governments. CRYPTOSMART is approved for Restricted Communications. It is well suited to address the key challenges governments and corporations face in the mobile environment: eavesdropping, network attacks, lost/stolen terminal, etc. CRYPTOSMART is compatible with best of breed smartphones, tablets and PC. Its high end security come from the use of a certified secure element in the handset. That is the reason why many governments and corporations trust us for their mobile security Trust & Independence Common criteria certifications Ease of use Of the shelf terminals ERCOM (HQ) Bâtiment Emeraude, 6, rue Dewoitine Vélizy-Villacoublay FRANCE Tel.: +33 (0) Fax: +33 (0) [email protected]

8 TheGreenBow SECURITY SOFTWARE VPN ENCRYPTION CRYPTO IPSEC PRIVATE PRIVACY SECURE REMOTE ACCESS TheGreenBow specializes in building highly reliable and ergonomic data encryption products. TheGreenBow products are designed to protect confidential data from unauthorized access. Our product line includes a world-leading VPN client and a revolutionary encryption solution. THEGREENBOW PRODUCTS TheGreenBow VPN client is a leading VPN client and has achieved Common Criteria EAL3+ certification. Our VPN client is multi-platform, multiprotocol, highly scalable, compatible with virtually all VPN Gateways and translated in 25+ languages. CryptoMailer is certainly the most versatile and universal end-to-end encryption solution available. Protecting your privacy has never been easier. True end-to-end encryption. Keep your private data safe. TheGreenBow Trusted communications THEGREENBOW (HQ) 28, rue de Caumartin Paris FRANCE Tel.: +33 (0) [email protected]

9 Idecsi MAILBOX PROTECTION Idecsi has created an essential innovation that is totally dedicated to mailbox protection for Top managers, Key People and Executive Board members. How can you be sure that no one reads your ? The Idecsi innovation has been built thanks to a main and simple observation: there is a digital source that contains some of the most sensitive information of a company: the top managers' mailboxes, where their s as well as all their contacts and schedule information are stored. Paradoxically enough, this source still has 3 major weaknesses that no system has been able to cover yet: Indiscretion, be it malicious or caused by staff. Identity theft and abusive use of personal passwords. Access to mailboxes by means of a hack or a robot (made easier by the BYOD risk). IDECSI ACCESS ANALYZER works like an intelligent alarm system which alerts you immediately in case of malicious access to mailboxes, whatever the means used to access them. Designed for Top Executives, the solution is completely transparent for the protected persons (no additional constraints). It is neutral for IT Systems. It is neither intrusive nor disruptive. It is easy to install (less than 4 hours). Idecsi is a French company. It is the result of 24 months of R&D and it relies upon worldwide patent protection. IDECSI (HQ) allée du parc de Garlande, Bagneux FRANCE Tel. : +33 (0) [email protected]

10 Ilex IAM IDENTITY MANAGEMENT ACCESS MANAGEMENT IDENTITY FEDERATION SINGLE SIGN-ON ROLE MANAGEMENT STRONG AUTHENTICATION CARD MANAGEMENT COMPLIANCE ILEX is a software provider specializing in IAM (Identity & Access Management). Provider to most of the blue chip companies, throughout the past 20 years Ilex has developed proven expertise in data access control and the management of identity and rights repositories. In its last IAM reports, Gartner ranks ILEX as one of the top vendors of this market. ILEX PRODUCTS Sign&go: Strong Authentication, Access Management, Global SSO (Web Access Management, and Enterprise SSO) and Identity Federation, Meibo: Workflow, Provisioning and Identity Management, Meibo People Pack: a turn-key solution for enterprise employee lifecycle management, IDen Park: Card Management System (PKI). ILEX (HQ) 51, boulevard Voltaire Asnières-sur-Seine FRANCE Tel.: +33 (0) Fax: +33 (0) [email protected]

11 InWebo 2-FACTOR AUTHENTICATION TRANSACTION SEALING IDENTITY FEDERATION BRING-YOUR-OWN-TOKEN WEB SSO AGENTLESS TOKEN In-Webo provides frictionless 2-factor authentication and online transaction sealing that protects digital identities, thereby protecting your business in a connected world. In-Webo enables easy, massive and on-time rollout with its highly secure tokens. Its unique, patented and certified technology uses dynamic keys. Turn your laptop, tablet, phone or smartphone, TV into a 2-factor authentication and align your security with your business requirements whether you are a business, a service provider or a SaaS vendor! We are your last mile partner for your IT infrastructure security. IN-WEBO PRODUCTS In-Webo offers global online service to make the authentication agile and easy for the user but also for the IT team: HSM based servers, automatic provisioning, flexible management, several flavors of tokens including mobile, browser token, in-app tokens, and a password manager. IN-WEBO TECHNOLOGIES (HQ) 3, rue Montyon PARIS FRANCE Tel.: +33 (0) [email protected]

12 ITrust VULNERABILITY SCANNER APT DETECTION BEHAVIORAL ANALYSIS ITrust, French solution editor offers its expertise in cyber security services and innovative technology solutions in the European market. We cover all the market safety issues, both organizational EBIOS, HDS, HIPAA, PCI, isae3402, technical, legal and physical (data center audits). The expertise and experience of our engineers, developers, and consultants have convinced us that our clients' level of security can be greatly improved by well designed tools, simple and efficient, ergonomic. Our tools and services incorporate the best of current technology. ITRUST PRODUCTS Ikare, vulnerability scanner: Ikare automates the implementation of the best practices in security and vulnerability management. The tool provides both a simple solution for network monitoring, as well as easy management and control of key safety factors. Dashboard: To assess the compliance of the overall security of the company according to the good practice guide ANSSI and / or in the company's security policy. IT-tude, behavioral analysis: IT-tude automatically analyzes the behavior of information systems and search for weak signals in the vast amount of data generated by the servers, applications, databases, network equipment and security. It identifies very precisely security flaws than a dozen (and much more) to regularly encountered security problems. ITRUST (HQ) BAT ACTYS/1-55 l Occitane Labège FRANCE Tel.: +33 (0) [email protected]

13 Netheos SECURE SUBSCRIPTION ON MOBILE NEW CUSTUMER ACQUISITION STRONG AUTHENTICATION CERTIFICATE-BASED SIGNATURE T R U S T A N D P R I V A C Y Netheos is the specialist in secure paperless transactions and contracts on smartphone and tablet. Netheos enables financial institutions to innovate quickly in new mobile services while ensuring their technical and legal safety: loan, insurance or credit card subscription. Embedded to the heart of the mobile application, ekeynox ensures identity of existing customers (strong authentication), but also new customers (on-the-fly verification of photographed documents, such as a national ID card), and implements an electronic signature with probative value enforceable against a third party. NETHEOS PRODUCTS ekeynox Mobile SDK ekeynox Management System (SaaS or in-premises) ekeynox Trusted Services (SaaS) NETHEOS FRANCE (HQ) 1025, avenue Henri Becquerel Montpellier FRANCE Tel.: +33 (0) [email protected]

14 Olfeo INTERNET SECURITY URL FILTERING PROXY ANTIVIRUS WEB TRAFFIC OPTIMIZATION VISITORS WEB ACCESS MANAGEMENT Olfeo offers a proxy and content filtering solution allowing organizations to manage their Internet access and usage. Olfeo brings a unique and innovative vision to the security market based on its multi-local approach using versions of the Olfeo solution tailored to each country. Thanks to this multi-local approach, Olfeo solution offers the best and optimal legal protection, an unrivalled filtering quality and a high level of security for your information systems. This strategy, focused on innovation, has been overwhelmingly popular and convinced over 2000 satisfied customers. OLFEO PRODUCTS The Olfeo solution includes 5 products: Proxy Cache QoS and SSL URL filtering Protocol filtering Antivirus Mobility Controller Available in numerous formats: software, appliance, virtualized, SaaS, the solution offers a single and multi-language administration console. OLFEO (HQ) 4 rue de Ventadour PARIS FRANCE Tel.: +33 (0) [email protected]

15 OpenTrust TRUSTED ID EGOVERNMENT SOLUTIONS STRONG AUTHENTICATION CREDENTIAL MANAGEMENT SYSTEM DIGITAL SIGNATURE SECURE EXCHANGE DOCUMENTS TRACEABILITY OpenTrust is a leading provider of trusted identity-based solutions for protecting credentials, data, documents and transactions featuring digital signature, confidentiality and proof management. We are also an internationally recognized Certification Authority. OpenTrust s product lines are available as a cloud service or under a software license. Every day, millions of people around the world use OpenTrust technologies with their corporate badges, their passports, when signing contracts, insurance policies, loans, rental agreements, and more, both on-line and in person. OPENTRUST PRODUCTS Citizen ID : Secure Digital Identities of Citizens Corporate ID : Manage Digital Identities of People, Devices, Machines and Networks Digital Signature : Sign Anywhere, Anytime from a Fixed or a Mobile Device Digital Transaction : Secure Exchanges, Documents and Transactions OPENTRUST (HQ) 175, rue Jean-Jacques Rousseau, Issy-les-Moulineaux cedex FRANCE Tel.: +33 (0) Fax: +33 (0) [email protected]

16 Ozon THE 1 ST ALL-IN-ONE WEB CYBERSECURITY SOLUTION Web Cybersecurity Solution Web sites, applications & transactions comprehensive protection. All-in-one Cybersecurity Solution OZON is the first cloud-based service design to protect web sites, applications and transactions against all known sophisticated cyber-attacks & frauds. A full coverage of digital risks that threaten your ebusiness & ecommerce activities. Simple & Smart OZON cloud service is activated in few minutes without any changes to your web site, ecommerce site, web application or corporate CMS. OZON platform detect vulnerabilities & malwares, protect against cyber-attacks and identify fraudulent transactions in real time. Security monitoring 24/7 New vulnerabilities, malwares, cyber-attacks and frauds are emerging every day. Our team of experts constantly analyze new digital risks and adjust OZON s service security level on the fly. OZON (HQ) 25, rue du Maréchal Foch VERSAILLES FRANCE Tel.: +33 (0) [email protected]

17 Prim X DATA ENCRYPTION Prim X is a provider of data encryption software for IT systems. Prim X Technologies develops encryption solutions to efficiently prohibit unauthorized access to sensitive information whether local or remote, stored or exchanged. Main Prim X encryption software: ZoneCentral: Protection of files stored on workstations, peripherals and servers Cryhod: Protection of laptops with pre-boot authentication and full-disk encryption ZonePoint: Encryption of data shared on MS SharePoint and filing security Zed!: Encrypted containers for data archiving or exchange (free reader available for all operating systems and platforms) ZedMail: confidentiality through end-to-end encryption with password or certificate authentication Certifications and Labels : NATO Restricted EU Restricted Common Criteria EAL3+ ANSSI Qualifications PRIM X (Sales Department) 117, avenue Victor Hugo Boulogne-Billancourt FRANCE Tel.: +33 (0) [email protected]

18 Qosmos NETWORK INTELLIGENCE A pioneer in embedded Network Intelligence software, Qosmos is the leading independent OEM provider on the market today, serving more than 60 companies worldwide. Qosmos turns networks into information sources, making them application - and service - aware. The company s award-winning Deep Packet Inspection (DPI) and Layer 7 Network Intelligence (NI) technologies recognize thousands of communication protocols and metadata attributes, creating an essential information layer that gives the most accurate picture of real-time data activity on networks. Market-leading equipment makers, solution vendors and systems integrators embed Qosmos in network solutions where real-time application awareness is critical. Qosmos technology can be found embedded in Next Generation Firewalls, SIEM/NBAD Solutions, Content Extraction for DLP and Malware, and DDOS Mitigation. Qosmos products can be used in all environments - physical, virtualized and in SDN architectures - to accelerate time to market and ensure continuous signature updates. Qosmos ixengine : Software Development Kit. Qosmos flagship product already established as the de facto industry-standard DPI engine for developers of network solutions. DeepFlow Application Component Suite: Software Platform. Qosmos Service Aware Module : L7 Classifier for Open vswitch. Qosmos Classifier Qosmos DPI VNFC: Qosmos DPI as a Virtual Network Function Component. QOSMOS (HQ) Immeuble Le Cardinet, 8 rue Bernard Buffet Paris FRANCE Tel. : +33 (0) [email protected]

19 Sentryo CRITICAL INDUSTRIAL SYSTEMS (SCADA) PROTECTION Sentryo delivers an innovative solution to secure critical industrial systems (SCADA) and to bridge the gap between the automation (OT) and IT world. Sentryo ICS CyberVision protects critical networks against cyber-attacks. Probes placed at key locations on the network (tap mode) analyze the traffic to extract metadata which are then aggregated on the cyber vision server. The server dynamically generates a graph providing the network manager with an always updated map of the network situation. The cyber vision server detects all abnormal event or behavior and triggers alarms for the process engineers. The server records all events for forensic purpose. Also it provides dashboards to the security officer. Sentryo ICS CyberVision: Sentryo Security Probes A range of industrial grade hardware probes Sentryo CyberVision Server CyberVision Appliance Sentryo Threat Intelligence Service On line service to update the server vulnerability database SENTRYO (HQ) 16, Chemin du Siroux Charbonnières FRANCE Tel.: +33 (0) [email protected]

20 TrustInSoft SOFTWARE ANALYSIS SOLUTIONS FOR CYBERSECURITY AND SAFETY TrustInSoft is the only software vendor able to assess safety and security of software without the need to change software development process. TrustInSoft sells tools and services to analyze source code. TrustInSoft unique value proposal is to bring guarantees on the behavior of software. TrustInSoft solutions are currently in use for software designers or integrators in the following domains: aeronautics, military, energy, telecom, space, railways. TrustInSoft proposes the following tools and services: TrustInSoft Analyzer, the award winning software analysis tools allowing to mathematically guarantee the conformity to a specification or the absence of flaws in software. TrustInSoft Advanced Software Audit, a service in which TrustInSoft experts uses TrustInSoft Analyzer on the customer s software. This service enables to get guarantees on the analyzed software. TrustInSoft Expertise, a service of expertise to help customers use and deploy TrustInSoft Analyzer. It consists of training sessions, methodological help or event design of dedicated TrustInSoft Analyzer plugins. TRUSTINSOFT (HQ) 140 bis, rue de Rennes Paris FRANCE Tel.: +33 (0) [email protected]

21 Vade Retro ANTI SPAM ANTI MALWARE ANTI PHISHING ANTI BLACKLISTING ANTI ADS Vade Retro Technology, European leader, protects and classifies several hundred million inboxes worldwide. Thanks to a combination of several technologies including the use of a heuristic and behavioral filter, our solutions allow: Secure inbound and outbound SMTP traffic Block 0-day attacks To be protected against low waves To auto-classify low-priority s To safely unsubscribe from ads The solution has been mentioned by Gartner in the Magic Quadrant from july The best filter worldwide for non-english s. VADE RETRO TECHNOLOGY PRODUCTS Corporate Vade Retro Cloud Physical or virtual MailCube appliance Hosting, IPS & OEM solutions Vade Retro Cloud Kit SDK Filter Engine MTA by Vade Retro Range offering multi-level administration, adaptable to all system environments. VADE RETRO TECHNOLOGY (HQ) 3 av. Antoine Pinay - Parc d activité des 4 Vents Hem FRANCE Tel.: +33 (0) Fax: +33 (0) [email protected]

22 WALLIX PRIVILEGED ACCOUNTS MANAGEMENT AUDIT & COMPLIANCE IT CONTRACTORS AND THIRD PARTIES MONITORING INSIDER THREAT MITIGATION T R A C E, A U D I T & T R U S T WALLIX is a major global player in privileged user management, compliance, and traceability solutions. WALLIX have succeeded in combining the three core requirements of managing privileged users, password management, access control and traceability, into a single easy to deploy solution - The Wallix AdminBastion (WAB). The solutions are designed to meet the needs of Chief Information Officers and Chief Information Security Officers to improve governance of access to sensitive data and company computing resources, in compliance with regulations in IT risk management in financial sector, industry, defense, healthcare and the public sector. WALLIX SOLUTIONS WALLIX ADMINBASTION - WAB: The software suite WAB tracks privileged users activity and manages passwords. WAB can be consumed "on premise", "as a service" or "on demand". WALLIX FRANCE (HQ) 118, rue de Tocqueville Paris FRANCE Tel.: +33 (0) Fax: +33 (0) [email protected]

23 Our partners

24 w w w. h e x a t r u s t. c o m