Post on 10-Feb-2017
transcript
CUSTOMER SUCCESS STORY
Industry Publishing
Number of employees 768
Location Tokyo, Japan
Customer’s challengeTo strengthen security against new threats targeting membership sites and reduce the risks of data leakageTo strengthen security without increasing the workload of the limited number of personnel To adopt products with proven operational results on the AWS operating platform
Trend Micro solutionsTrend Micro Deep Security
Business BenefitsThe solution provided a number of functions including: host-type antivirus, IDS/IPS, Web-application firewall (WAF), and log monitoring. It also offered multilayered protection that was able to provide advanced security countermeasures which control the risk of data leakageThe diverse functions of Deep Security a lso made i t possible to unify operations and technical support, and have minimized operational burdenThe abundant operational results of Deep Security on AWS provided Shueisha with an even greater peace of mind
IT environmentAmazon Web Services (AWS)
Shueisha Inc.
Shueisha Inc.
HAPPY PLUS system configuration on AWS
The company needed to protect its members’ information from increasingly clever and diverse attacks but conventional countermeasures were insufficient. It consequently demanded stronger security.
The company implemented a number of host-type security functions to achieve multilayered protection. The one-stop solution strengthened security and reduced operational burden.
Before
After
>>
Large publisher migrates its web portal site HAPPY PLUS to AWS to securely protect its members’ information and grow its business
Challenge
As a publishing house with a large and diverse portfolio, Shueisha provides a wide range of
novels and literary material to the Japanese public, including comic books, lifestyle magazines,
and publications showcasing new writing talent. In recent years, the company has actively
leveraged the wealth of content that it holds to provide information to readers through
websites.
“HAPPY PLUS,” a web portal aimed at women, is among their most successful websites.
“HAPPY PLUS uses content from a variety of our women’s magazines to provide information
about fashion, beauty, gourmet, cooking, travel, and weddings to a broad audience of women,”
explains Shueisha’s Takatoshi Yokota.
Shueisha originally hosted HAPPY PLUS on the same shared servers that hosted its corporate
site. But as traffic to the site increased—and experienced large surges as each new article
appeared—it became harder to maintain acceptable service levels. In order to respond to the
increased traffic, the company decided to migrate HAPPY PLUS to a cloud platform. After
evaluating track records, costs, and operational manageability, the company migrated the site
to Amazon Web Services (AWS).
At the same time as the
migration to the cloud, the
company also made efforts to
strengthen security. “As a
membership site, HAPPY
PLUS has to protect its
members’ private information.
With increasing damage
from new threats such as
‘list-based account hacking,’
which uses stolen credentials
to fraudulently infiltrate
websites, we realized that
updating the security was a
critical need,” says Yokota.
Solutions
After discussions with
Classmethod Inc., the cloud
integrators responsible for the new HAPPY PLUS deployment,
Shueisha chose Trend Micro Deep Security as their new
cloud security solution.
The company was particularly impressed with Deep
Security’s track record for protecting systems on AWS. Deep Security integrates all functions
that are considered essential to reliably detect and eliminate the threats that target web
systems.
“HAPPY PLUS is operated by a limited number of personnel, so we needed to reduce the
operational burden as much as we could. Deep Security provides IDS/IPS, Web Application
Firewall (WAF), and antivirus functions. As a single, comprehensive solution, it’s not only more
effective than a collection of single-function solutions, it’s also far more efficient, since everything
from daily management to technical support is completely integrated,” explains Yokota.
Furthermore, it was also possible to detect the list-based attacks mentioned previously by
monitoring Deep Security logs. Because Deep Security’s Web-application firewall (WAF) can be
deployed on hosts, Shueisha did not have to consider network restrictions, a problem which
commonly occurs with gateway WAF.
The deployment went ahead after thorough load testing confirmed that Deep Security did not
affect operation of the site even during times of high load.
Results
The HAPPY PLUS infrastructure on AWS includes web servers, application servers, and
databases (see diagram). Deep Security is deployed on six web servers that are the most
susceptible to an outside attack. Since the security of the IDS/IPS is particularly important, it
runs in “block mode”.
The IDS/IPS capabilities of Deep Security can be deployed either in “detect mode” or “block
mode.” In detect mode, malicious content is allowed to pass through, and an alert is sent to
administrators. Shueisha chose to deploy in block mode, which blocks malicious traffic in
addition to generating an alert. “Detect mode is useful if you have services like payment
processing or communication, where interruptions could be very costly. But since HAPPY PLUS
traffic doesn’t include that kind of service, we use block mode to optimize security,” says Yokota.
Trend Micro took the unique characteristics of HAPPY PLUS into account and provided support
to optimize the settings of Deep Security for the environment. “Although we frequently meet
with our integrators, software vendors tend to remain at a distance. However, Trend Micro
visits us frequently and responds attentively to even our most detailed questions. This support
has given us a great sense of security,” says Yokota.
After using Deep Security to create a safe and secure operating environment on AWS,
Shueisha now enjoys the cloud’s benefits, including a reduction of costs and operational
workload, as well as the resource elasticity of Amazon’s “Auto Scaling” feature. In the future,
the company plans to expand its service platform as the number of HAPPY PLUS members
increases. “Using the web and the cloud will become significant keys for Shueisha’s business. Security
countermeasures are essential to allow our customers to use our services with peace of mind.
We expect Trend Micro to continue providing us with the optimal proposals and solutions,” says
Yokota.Trend Micro
Deep Security
Users
Smartphones
Route 53
Webserver
Applicationserver
Applicationserver
Trend MicroDeep Security
Webserver
Applicationserver
Trend MicroDeep Security Database
(main)Database
(main)
Database(sub)
Database(sub)
Zabbix
CloudWatch CloudFormation AMI
CloudFront Amazon S3
PCs
Tablets
CUSTOMER SUCCESS STORY
As a major publisher in Japan, Shueisha’s business covers a wide range of literary fields, including magazines, books, comics, dictionaries, children’s books, and photographic collections. In recent years, the company has also begun to create and distribute electronic books and comics. http://www.shueisha.co.jp/
Deep Security integrates all the security functions that we consider essential. In addition to the security that it provides, the ability to operate it more efficiently than deploying separate solutions is very appealing.
Takatoshi YokotaSupervisorMedia OfficeBrand DivisionShueisha Inc.
Customer profile
Shueisha Inc.
Copyright © 2014 Trend Micro Incorporated. All rights reserved.TREND MICRO and Trend Micro Deep Security are registered trademarks of Trend Micro Inc. The names of all companies, products and services contained in this document are trademarks and/or registered trademarks of the respective companies. Amazon Web Services, Amazon S3 and the Amazon Web Services logo, are trademarks of Amazon.com, Inc. and/or related companies. The content of this document is accurate as of June 2014. Content is subject to change without notice. [Item No. BR-CASE-041]
Trend Micro Incorporated www. trendmicro.com
Challenge
As a publishing house with a large and diverse portfolio, Shueisha provides a wide range of
novels and literary material to the Japanese public, including comic books, lifestyle magazines,
and publications showcasing new writing talent. In recent years, the company has actively
leveraged the wealth of content that it holds to provide information to readers through
websites.
“HAPPY PLUS,” a web portal aimed at women, is among their most successful websites.
“HAPPY PLUS uses content from a variety of our women’s magazines to provide information
about fashion, beauty, gourmet, cooking, travel, and weddings to a broad audience of women,”
explains Shueisha’s Takatoshi Yokota.
Shueisha originally hosted HAPPY PLUS on the same shared servers that hosted its corporate
site. But as traffic to the site increased—and experienced large surges as each new article
appeared—it became harder to maintain acceptable service levels. In order to respond to the
increased traffic, the company decided to migrate HAPPY PLUS to a cloud platform. After
evaluating track records, costs, and operational manageability, the company migrated the site
to Amazon Web Services (AWS).
At the same time as the
migration to the cloud, the
company also made efforts to
strengthen security. “As a
membership site, HAPPY
PLUS has to protect its
members’ private information.
With increasing damage
from new threats such as
‘list-based account hacking,’
which uses stolen credentials
to fraudulently infiltrate
websites, we realized that
updating the security was a
critical need,” says Yokota.
Solutions
After discussions with
Classmethod Inc., the cloud
integrators responsible for the new HAPPY PLUS deployment,
Shueisha chose Trend Micro Deep Security as their new
cloud security solution.
The company was particularly impressed with Deep
Security’s track record for protecting systems on AWS. Deep Security integrates all functions
that are considered essential to reliably detect and eliminate the threats that target web
systems.
“HAPPY PLUS is operated by a limited number of personnel, so we needed to reduce the
operational burden as much as we could. Deep Security provides IDS/IPS, Web Application
Firewall (WAF), and antivirus functions. As a single, comprehensive solution, it’s not only more
effective than a collection of single-function solutions, it’s also far more efficient, since everything
from daily management to technical support is completely integrated,” explains Yokota.
Furthermore, it was also possible to detect the list-based attacks mentioned previously by
monitoring Deep Security logs. Because Deep Security’s Web-application firewall (WAF) can be
deployed on hosts, Shueisha did not have to consider network restrictions, a problem which
commonly occurs with gateway WAF.
The deployment went ahead after thorough load testing confirmed that Deep Security did not
affect operation of the site even during times of high load.
Results
The HAPPY PLUS infrastructure on AWS includes web servers, application servers, and
databases (see diagram). Deep Security is deployed on six web servers that are the most
susceptible to an outside attack. Since the security of the IDS/IPS is particularly important, it
runs in “block mode”.
The IDS/IPS capabilities of Deep Security can be deployed either in “detect mode” or “block
mode.” In detect mode, malicious content is allowed to pass through, and an alert is sent to
administrators. Shueisha chose to deploy in block mode, which blocks malicious traffic in
addition to generating an alert. “Detect mode is useful if you have services like payment
processing or communication, where interruptions could be very costly. But since HAPPY PLUS
traffic doesn’t include that kind of service, we use block mode to optimize security,” says Yokota.
Trend Micro took the unique characteristics of HAPPY PLUS into account and provided support
to optimize the settings of Deep Security for the environment. “Although we frequently meet
with our integrators, software vendors tend to remain at a distance. However, Trend Micro
visits us frequently and responds attentively to even our most detailed questions. This support
has given us a great sense of security,” says Yokota.
After using Deep Security to create a safe and secure operating environment on AWS,
Shueisha now enjoys the cloud’s benefits, including a reduction of costs and operational
workload, as well as the resource elasticity of Amazon’s “Auto Scaling” feature. In the future,
the company plans to expand its service platform as the number of HAPPY PLUS members
increases. “Using the web and the cloud will become significant keys for Shueisha’s business. Security
countermeasures are essential to allow our customers to use our services with peace of mind.
We expect Trend Micro to continue providing us with the optimal proposals and solutions,” says
Yokota.