Shulou(Shulou.com)12/24 Report--

Recently, Gartner released its first "Market Guide for Cloud Web Application and API Protection" report (hereinafter referred to as "the report"). Tencent Cloud has been selected as a representative vendor (Representative Vendors) by Gartner for its edge security acceleration platform Tencent Cloud EdgeOne and Web application firewall Tencent Cloud WAF, which can effectively help enterprises cope with the changing security requirements of Web applications and API, and protect their business.

In recent years, with the rapid popularization of cloud native technology, more and more enterprises gradually relocate their core business to the cloud, and the continuity and security of enterprise business become a top priority. As a comprehensive multi-tier protection solution, cloud Web applications and API Protection platform (WAAP) services can effectively improve business continuity and security protection capabilities of enterprises by simplifying deployment and management, reducing costs, improving performance and resilience. Gartner predicts that "by 2026, 40 per cent of organizations will select WAAP service providers based on quality WAAP security features, up from less than 15 per cent in 2022; more than 40 per cent of organizations with To C applications will rely on WAAP service providers to mitigate BOT attacks, which is less than 10 per cent in 2022." According to these two sets of data, it can be predicted that there is a huge room for growth in the WAAP market in the next few years.

Moreover, the network threats faced by modern enterprises are becoming more and more complex, and there is an urgent need for flexible and responsive security solutions. The report also notes that "some cloud WAAP solutions provide WAAP services combined with CND, resulting in higher availability and stronger performance by distributing services across the end user's region."

Tencent Cloud EdgeOne, as the next-generation CDN, adopts the architecture of the integration of security protection and CDN acceleration. The request from the client is first protected by the checksum of the security module, then through the caching and acceleration mechanism of CDN, and finally arrives at the origin server. This design effectively integrates security protection and content distribution acceleration, providing better performance, more flexible capabilities and more complete protection effects for all kinds of businesses.

In addition, the architecture of the integration of security protection and CDN acceleration also provides customers with more cost-effective product solutions. Most of the security products in the market adopt (guarantee + flexibility) traffic or QPS billing method, which includes business traffic + attack traffic, while EdgeOne billing method is clean traffic (that is, traffic after security protection). Charging by clean traffic is more friendly to business development, and users can focus more on their own business development without having to worry about high bills caused by attacks.

(help a customer clean 40% of the stolen traffic, saving nearly half of the cost for the customer)

At present, EdgeOne has served various kinds of game projects, popular audio and video applications, cross-border e-commerce platforms, institutions and other industry customers around the world, providing one-stop security acceleration services for a variety of business scenarios in various industries.

EdgeOne's Anti-DDoS function module provides high-traffic attack protection and super T-level protection for a new game.

(EdgeOne intercepts DDoS attacks larger than 1.1Tbps)

After the interface of a popular sea game customer is accelerated by EdgeOne, the request time is reduced from 1 second to 400ms, which is improved by 60%. At the same time, it fends off hundreds of CC attacks, more than 2000 million attack requests, and more than 100 million WAF intrusions per month.

(EdgeOne resists over 100 million WAF intrusions)

EdgeOne's flexible edge architecture provides fast iterative capabilities for customers' business and hacker attacks. Taking a malicious video file uploaded by an audio / video customer due to a business vulnerability as an example, we reduce the iteration period of protection capability from several days to several hours by making use of the edge function capability of EdgeOne. This scheme is suitable for identifying and protecting malicious activities that exploit business vulnerabilities, such as misusing site resources by uploading camouflaged picture files.

At the same time, EdgeOne's Web protection and Bot protection modules provide protection against automatic vulnerability upload attacks initiated by hackers, and reduce the occupation of business resources by providing continuous inspection and removal of malicious caches in the storage phase. In the service download phase, the WAF / CC strategy can be loaded through the edge function, and the JS challenge can avoid malicious theft and reduce the cost of business traffic. This flexible response strategy improves the response speed of security protection and protects the resource utilization efficiency and operational stability of the enterprise.

(EdgeOne helps the customer suppress bandwidth from 94Gbps to 12Gbps)

It is worth mentioning that Tencent Cloud EdgeOne has been recognized by the industry for many times, and has been selected as the market guide for Gartner DDoS mitigation solutions, the first in the Asia-Pacific region in Omdia DDoS market share, the leading competitor in the evaluation of edge function, and the only manufacturer whose edge security acceleration capability fully meets the requirements of CICT standards.

In the future, with the acceleration of enterprise digitization, the extension of enterprise security construction to cloud applications has become a general trend. Tencent Cloud will also continue to dig into multi-dimensional scenarios such as mutual interaction, games, e-commerce, and other industries. Continue to carry out technological upgrading and product innovation, build a solid defense system of enterprise digital assets, and help more enterprises achieve sustainable and high-quality development.

Gartner, Market Guide for Cloud Web Application and API Protection, 13 November 2023

Gartner, Market Guide for DDoS Mitigation Solutions, 15 May 2023

GARTNER is Gartner, Inc. Trademarks and service marks of and / or its affiliates in the United States and internationally, and are used herein with permission. All rights reserved. Gartner does not support any supplier, product or service in its research report, nor does it advise technology users to choose only those suppliers with the highest scores or other titles. Gartner's research report contains the opinion of the Gartner research and advisory organization, which should not be regarded as a statement of fact. For the purposes of this study, Gartner waives all warranties, express or implied, including any warranties of merchantability or fitness for a particular purpose.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.