WebRTC Solutions Industry News

[May 29, 2006]

Web attacks on the rise - Acunetix appeals for web security auditing.

Dramatic rise in web application hacks dents online purchasing confidence and causes irreversible damage to businesses

London, UK – 29 May, 2006 – Web hacking attacks reported recently in the media have cost companies millions of dollars in fines, compensation and damage control measures. In a recent security workshop Acunetix CEO, Nick Galea, launched an appeal to companies with an online presence to improve and enforce web application security auditing.

The Cost of Hack Attacks

Consumer data broker ChoicePoint, Inc. had to pay $10 million in civil penalties and $5 million in consumer redress to settle Federal Trade Commission charges after it acknowledged that the personal financial records of more than 163,000 consumers in its database had been compromised in 2005.

ZDNET recently reported that more than 4,000 UK MasterCard holders may have been affected by a security breach that occurred after hackers gained access to credit card details through a UK-based online retailer. Thousands of cards had to be cancelled and re-issued as a result, as well as MasterCard issuers having to call up all customers whose details had been compromised.

Similarly, last month, a San Diego man was charged with hacking into USC admissions Web site and accessing more than 270,000 applications containing sensitive information such as birth dates, addresses and Social Security numbers. USC spent more than $140,000 to notify affected students and also shut down the applications Web site for 10 days. The hack was made via a SQL injection attack.

Attacks on the Increase

Galea revealed worrying statistics: “In a paper presented at the JavaOne conference last year, Cisco security architect Martin Nystrom claimed that as many as 95% of web applications have serious flaws, 80% of which are being vulnerable to cross-site scripting attacks”, reported Galea. Attacked sites include the famous open-source repository Sourceforge.net and the popular MySpace.com social network.

Acunetix provides free audit to help companies determine risk level of their website

Enterprises would like to have their website security checked can register for a free audit by visiting www.acunetix.com/security-audit. Participating enterprises will receive a summary audit report showing whether their website is secure or not. Summary reports will be delivered within five business days of submission.

About Acunetix Web Vulnerability Scanner
Acunetix Web Vulnerability Scanner ensures website security by automatically checking for SQL injection, Cross site scripting and other vulnerabilities. It checks password strength on authentication pages and automatically audits shopping carts, forms, dynamic content and other web applications. As the scan is being completed, the software produces detailed reports that pinpoint where vulnerabilities exist.

About Acunetix

Acunetix was founded to combat the alarming rise in web attacks. Its flagship product, Acunetix Web Vulnerability Scanner, is the result of several years of development by a team of highly experienced security developers. Acunetix is a privately held company with headquarters based in Europe (Malta), a US office in Seattle, Washington and an office in London, UK. For more information about Acunetix visit: http://www.acunetix.com.

All product and company names herein may be trademarks of their respective owners.

For more information:
Please email Tamara Borg: tamara@acunetix.com
Acunetix Ltd: Tel: (+44) 0845 6126712; Fax: (+44) 0845 6126716.
URL: http://www.acunetix.com.

[ Back To WebRTC Solutions's Homepage ]


Featured Podcasts

Delivering First Class Communications With WebRTC

This webcast captures a recent discussion about WebRTC between Jim Donovan, Director of Product Management at Oracle and Larry Hettick, Editorial Director and Senior Research Fellow at Webtorials. The topics cover WebRTC reliability, interoperability, and security--looking at how Oracle addresses these issues.

Oracle in Enterprise Communications

Most in the industry have heard of the acquisition of Acme Packet by Oracle. What you may not know is that Oracle has a number of telecommunications products including a UC suite, WebRTC Session Controller, and Operations monitoring tools. Oracle is pursuing both the enterprise and service provider.

Featured Whitepapers

ConnectCare & Unified Contact Manager

SPAN's ConnectCare is a WebRTC-based telemedicine app, which allows consumers to easily and instantly avail clinical healthcare from the providers, regardless of their location. This app is extremely useful to healthcare providers, patients and their caregivers alike.

WebRTC Security Concerns

This whitepaper covers two of the most relevant topics in communications industry today: WebRTC and security. We will introduce the problem of security in WebRTC including those traditional VoIP attacks that are going to be present in WebRTC services. Later we will mention ad-hoc WebRTC attacks and protection mechanisms, to close with an overview of identity management solutions.

Migrating Real Time Communications Services to the Web

In the Internet age, businesses that own fixed and mobile communication networks, including traditional Communications Service Providers (CSPs) of all kinds, are being challenged with some tough questions: How do we stay relevant to our customers?

Delivering Enterprise-Class Communications with WebRTC

WebRTC is an emerging industry standard for enabling Web browsers with real-time communications capabilities. It enables enterprises to enhance Web sites, empower BYOD users, and improve video collaboration and on-line meetings, to name but a few examples.

WebRTC Report Extract Reprint

This document examines the growing important of WebRTC, both generally and for telecom service providers. It considers the expanding range of use-cases, the multiple layers of interoperability likely to be desired by telcos, and some implications in terms of network integration and mobility.


Robust Enterprise Grade WebRTC Systems and Services

The emerging WebRTC standard has become one of the industry's hottest topics – and with good reason. Being able to "communications enable the web" has Communications Service Providers as well as Enterprises busily making plans for deployment. But, as these plans unfold, reality is starting to intrude on those plans. Our expectations of telephony services are much higher than web browsing. We expect the phone to connect instantly, operate with minimal disruption, and work seamless across any network, anywhere, at any time. There is also an understanding that phone service is inherently secure. With WebRTC, the expectation is for these applications to behave in the same manner.

This session looks at the user experience and expectations of a WebRTC Enterprise service. It will also cover how a WebRTC enterprise handles security, reliability, and interoperability within browsers and networks.


The Oracle Communications WebRTC Session Controller enables communications service providers (CSPs) and enterprises to offer WebRTC services – from virtually any device, across virtually any network – with carrier-grade reliability and security.

Sales Presentation: Oracle Communications WebRTC Session Controller

- WebRTC Market and Opportunities
- WebRTC Challenges
- Oracle Communication WebRTC Session   Controller
- Summary


Communication Service Provider (CSP) voice service revenues continue to face pressure due to shifts in communication preferences and competition from non-traditional service providers. Voice communications are now often embedded into applications outside the domain of traditional telephony voice usage. CSPs have been challenged to effectively leverage and monetize new web-oriented communications technologies.