WedgeOS Deep Content Inspection security platforms are the first to support to detect and to mitigate malware found in HTML5

Does your security still understand what's going on in the network?

HTML5 creates new compatibility and security challenges for organizations. With the support of influential organizations and browsers, HTML5 is enabling a media rich, more responsive internet experience that is revolutionizing the underlying structure of the web and how content is processed and presented. The fifth major revision of HTML has become a powerful tool for delivering and developing applications with the goal of creating a user-friendly, interactive web. However, with a new generation of malware using cross site communication, broader Javascript capabilities and the WebSocket protocol as vectors for delivery and infection, organizations will need to rethink methods and strategies for how they can secure their networks. 

Wedge Networks CEO, Dr.  Hongwen Zhang discusses the coming of HTML5 and what it means to internet security.

With the enticement of being able to deliver richer media, increased online responsiveness and the ability for disconnected operation, HTML5 is being implemented by web developers and delivered to end-user by early adopters such as Apple, YouTube, Adobe and Facebook. However, with so much new functionality comes new potential threats. Specifically, organizations must be acutely aware of the new WebSocket protocol and must understand what security holes it opens up in traditional network protection.

In order to maintain network security without disabling the many improvements that HTML5 brings, organizations must adopt Deep Content Inspection techniques that scan and understand the intent of all web traffic, regardless of protocol. This ensures that content packed into both existing and new standards; with emphasis on the increased two-way concurrent traffic found in HTML5; will be understood and security services can then be applied to remediate against any threats.

"The world is moving to HTML5" – Steve Jobs

WedgeOS is the first security platform able to detect and provide real-time remediation against viruses found in HTML5 specific content and protocols. WedgeOS protects organizations against threats in both new and traditional web standards.

Protection From Threats Within HTML5 Content

WedgeOS' Deep Content Inspection techniques enforce visibility of all web traffic regardless of the protocol. Wherever users go, whatever they click on – from hijacked sites to reputable sites such as Google –all traffic is scanned and remediated. WedgeOS Deep Content Inspection approach ensures your organization is protected against threats found on any protocol, including newly emerging threats that utilize HTML5's new, extended features.

The Industry's First Platform with WebSocket Support

To ensure that your organization is able to use HTML5 websites, WedgeOS is the first platform that has native WebSocket support to extract, scan and stop threats found in HTML5's new, powerful WebSocket protocol. With inbound and outbound support for HTML5 content, WedgeOS is the first solution that prevents security concerns created by WebSockets such as:

• HTTP Port Hijacking: WedgeOS Deep Content Inspection techniques will detect and prevent WebSocket attacks that hijack and use any other ports

• No Standard Applications: WebSocket can be used to transmit data for any application and using any payload. WedgeOS Deep Content Inspection techniques are required to ensure the content is scanned and understood in complex communication contexts.

• No Request URL/HTTP Headers: WebSockets allow the transmission of payloads without requiring well-formed HTTP headers, making it difficult for existing network security products to inspect and apply security policies. WedgeOS is the first solution that supports WebSocket protocols, giving your organization the ability to access and use HTML5 worry free.

Keeping Up With The High Performance Demands of HTML5

No Bandwidth bottlenecks or end user latency. WedgeOS achieves line speed high performance scanning throughput; an industry requirement for large scale security deployments. With HTML5's WebSockets, which are designed to provide even higher performance and concurrency, this need for performance and support across multiple concurrent sessions, native to HTML5, is further exacerbated.Protecting against malware without lessening the content delivery improvements native to HTML5, WedgeOS is a scalable, real-time solution that introduces little to no latency into networks.

WedgeOS Deep Content Inspection Testing Scenario