Welcome!

Microservices Expo Authors: Elizabeth White, Liz McMillan, Yeshim Deniz, Pat Romanski, Zakia Bouachraoui

News Feed Item

Forum Systems Achieves Industry-First International Security Certification

-- Setting a New Bar in Cloud Security, Forum Sentry is the Only API Gateway to Attain Network Device Protection Profile Compliance

BOSTON, Aug. 13, 2014 /PRNewswire/ -- Forum Systems Inc. today announced that Forum Sentry is the world's first API Gateway to achieve Network Device Protection Profile (NDPP) compliance.

In order to facilitate NDPP conformance, Forum Systems pursued a rigorous certification program with Corsec Security, Inc., the largest independent validation consultant in the security industry. The NDPP compliant designation builds on Forum Sentry's FIPS 140-2 certification foundation, reaffirming Forum Systems' commitment to delivering industry-leading API and cloud security gateway technology for protecting XML-, JSON-, SOAP- and HTML-traversing cloud, mobile and enterprise infrastructure traffic.

Although Common Criteria Evaluation Assurance Level 4 (EAL 4) has become the de facto standard for evaluation, the generic EAL 4 requirements may not be relevant, achievable and repeatable in all cases. The creation of technology-specific Protection Profiles with their own set of security assurance requirements can offer more targeted assurance with achievable, repeatable and testable requirements. Protection Profile compliance can require assurances and testing more rigorous than standardized EALs. In cooperation with other countries, the United States has initiated an evaluation paradigm where achieving success for certain IT products requires a transition to Protection Profile compliance and a move away from EALs.

Now "PP Compliant," Forum Sentry is the industry's only FIPS 140-2 NDPP-certified API Gateway for enabling secure connectivity between users, applications and the cloud. The first Layer 4-7 device to achieve NDPP security certification, it holds the industry's only patent for cryptographic acceleration of security processing.

"Improving cloud security is a massive challenge – but also represents a multibillion-dollar global opportunity for companies dedicated to delivering new, powerful and innovative solutions. Last summer, the Information Technology & Innovation Foundation forecasted that U.S. cloud computing providers could lose up to $35 billion in sales through 2016 based on escalating customer privacy and security concerns," said Mamoon Yunus, CEO of Forum Systems. "Entropy for random number generation is the cornerstone of strong cryptography. And Forum Sentry offers the highest level entropy coupled with hardened key protection to provide security assurance to those enterprise organizations hesitant to migrate to the cloud. We are excited to partner with Corsec to showcase Forum Sentry – the most hardened platform that delivers the industry's strongest cryptography."

"We have worked with Forum Systems for more than 10 years, making the rigorous security validation process easier, faster and more efficient so that Forum could focus on its core business objective – continuing to deliver strategic solutions to its customers," said Matthew Appler, CEO of Corsec. "We are pleased to team with Forum Systems to help this innovative company achieve NDPP certification and validate Forum Sentry's cryptographic capabilities in an evaluation that focused on technology-specific, tailored assurance requirements."

Processing and securing more than 10 billion transactions per day worldwide, Forum Sentry significantly reduces the cost and complexity of centralizing security, identity and governance for hundreds of global organizations, including some of the world's largest federal agencies. With the industry's most comprehensive built-in support for data formats and communication protocols, Forum Sentry enables companies to rapidly integrate internal SOA and external RESTful systems.

Last fall, Forum Systems significantly enhanced Forum Sentry with features including intelligent edge caching for network optimization, Amazon S3 integration for secure enterprise-to-cloud storage and expanded OAuth 2.0 support to simplify mobile SSO. Forum Sentry remains the industry's only FIPS 140-2 secured edge caching solution that provides tight integration with all enterprise-class identity stores to satisfy mobile users' demand for anytime, anywhere access while ensuring the highest levels of network security.

Additional Resources

About Corsec
Corsec is the world's leading certification solution. Corsec's 15-year track record includes more than one million hours of validation services delivered, more than 350 completed certifications, and hundreds of clients on five continents. For more information, visit corsec.com.

About Forum Systems
Forum Systems, a wholly owned subsidiary of Crosscheck Networks, Inc., is the innovation leader in API and cloud gateway technology. The industry's most comprehensive solution for centralized security, identity and governance for SOA, REST and mobile communications, Forum Sentry enables comprehensive threat mitigation and trust enablement, providing enterprises and government organizations worldwide with the foundation for achieving Secure Service Mediation. Processing more than 10 billion transactions per day worldwide, the NDPP-, FIPS- and DoD-certified Forum Sentry API Security Gateway delivers unparalleled protection against HTML-, XML-, SOAP- and REST-based vulnerabilities. Notably, Forum Systems products provide simplified integration and task processing with over 100 built-in, standards-based processing tasks. For more information, please visit www.forumsys.com.

All product and company names herein may be trademarks of their respective owners.

More Stories By PR Newswire

Copyright © 2007 PR Newswire. All rights reserved. Republication or redistribution of PRNewswire content is expressly prohibited without the prior written consent of PRNewswire. PRNewswire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Microservices Articles
SYS-CON Events announced today that DatacenterDynamics has been named “Media Sponsor” of SYS-CON's 18th International Cloud Expo, which will take place on June 7–9, 2016, at the Javits Center in New York City, NY. DatacenterDynamics is a brand of DCD Group, a global B2B media and publishing company that develops products to help senior professionals in the world's most ICT dependent organizations make risk-based infrastructure and capacity decisions.
Most DevOps journeys involve several phases of maturity. Research shows that the inflection point where organizations begin to see maximum value is when they implement tight integration deploying their code to their infrastructure. Success at this level is the last barrier to at-will deployment. Storage, for instance, is more capable than where we read and write data. In his session at @DevOpsSummit at 20th Cloud Expo, Josh Atwell, a Developer Advocate for NetApp, will discuss the role and value...
DevOpsSummit New York 2018, colocated with CloudEXPO | DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City. Digital Transformation (DX) is a major focus with the introduction of DXWorldEXPO within the program. Successful transformation requires a laser focus on being data-driven and on using all the tools available that enable transformation if they plan to survive over the long term.
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
Consumer-driven contracts are an essential part of a mature microservice testing portfolio enabling independent service deployments. In this presentation we'll provide an overview of the tools, patterns and pain points we've seen when implementing contract testing in large development organizations.
Adding public cloud resources to an existing application can be a daunting process. The tools that you currently use to manage the software and hardware outside the cloud aren’t always the best tools to efficiently grow into the cloud. All of the major configuration management tools have cloud orchestration plugins that can be leveraged, but there are also cloud-native tools that can dramatically improve the efficiency of managing your application lifecycle. In his session at 18th Cloud Expo, ...
Using new techniques of information modeling, indexing, and processing, new cloud-based systems can support cloud-based workloads previously not possible for high-throughput insurance, banking, and case-based applications. In his session at 18th Cloud Expo, John Newton, CTO, Founder and Chairman of Alfresco, described how to scale cloud-based content management repositories to store, manage, and retrieve billions of documents and related information with fast and linear scalability. He addresse...
Containers and Kubernetes allow for code portability across on-premise VMs, bare metal, or multiple cloud provider environments. Yet, despite this portability promise, developers may include configuration and application definitions that constrain or even eliminate application portability. In this session we'll describe best practices for "configuration as code" in a Kubernetes environment. We will demonstrate how a properly constructed containerized app can be deployed to both Amazon and Azure ...
Enterprise architects are increasingly adopting multi-cloud strategies as they seek to utilize existing data center assets, leverage the advantages of cloud computing and avoid cloud vendor lock-in. This requires a globally aware traffic management strategy that can monitor infrastructure health across data centers and end-user experience globally, while responding to control changes and system specification at the speed of today’s DevOps teams. In his session at 20th Cloud Expo, Josh Gray, Chie...
Discussions of cloud computing have evolved in recent years from a focus on specific types of cloud, to a world of hybrid cloud, and to a world dominated by the APIs that make today's multi-cloud environments and hybrid clouds possible. In this Power Panel at 17th Cloud Expo, moderated by Conference Chair Roger Strukhoff, panelists addressed the importance of customers being able to use the specific technologies they need, through environments and ecosystems that expose their APIs to make true ...