Boosting Drupal Security
Marc Gaffan
Co Founder, VP Marketing



    Confidential
Incapsula – The Company


     Incapsula is an Imperva [NYSE: IMPV] spin-out
     Founded in 2009 , Over 30 Employees
     Protecting Thousands of Websites




 2   Confidential
Incapsula

Incapsula is a cloud service that by a
    simple DNS switch, protects &
   accelerates any website without
  changing the site or installing any
         hardware / software

  Confidential
Incapsula – A MEGA Proxy in the Cloud




    Confidential
Vulnerabilities are Constantly Discovered

  Confidential
Get an Untraceable Email




    Confidential
Browse To Registration Page




    Confidential
Fail Registration




    Confidential
Add a Field that Denotes the Admin Groups




    Confidential
Create a New Admin Account




   Confidential
Verify you Account




    Confidential
Login




   Confidential
Administrator Login Page




    Confidential
Post Login




    Confidential
It’s All About Automation




    Confidential
51% of Website Traffic is NOT Human




    Confidential
16.3% of sites suffer from Googlebot Impersonation




   Among those targeted sites, 21% of those claiming to
   be Googlebot, were impersonators.
   The vast majority of such impersonators post comment
   spam and also steal website content.


    Confidential
So… How Can Incapsula Help?


   Website Security
   • Anti Bot (Automation)
   • Web Application Firewall (WAF)
   • DDoS Protection
   Site Acceleration
   • CDN (Content Delivery Network) – Caching on Edges
   • Content Optimization – Magnification, Compression,
     Connection Management
   Load Balancing
   • Distribute load across multiple servers directly from the cloud

   Confidential
Security via Application shielding and client filtering


                         Proprietary client
                     classification technology




                                                                                Humans
                                                                      Search
                                                               DDoS   engines
                                                               bots
                                                    Spammers



                          Active techniques based
                          on network, connection
                          and browser challenges




   Passive techniques based on
   network, connection, device
    and behavioral attributes




     Confidential
5 Minutes to Add you Sites




    Confidential
Incapsula Scan’s your Website




    Confidential
Confidential
Traffic Statistics




    Confidential
Performance Stats




   Confidential
Security Alerts




    Confidential
Security Settings




    Confidential
Web Application Firewall Settings




    Confidential
Notification and Reports




    Confidential
Weekly Report




   Confidential
How Much?




   Confidential
What do you need to do to get started ?




                   Virtually nothing
                   Just a Simple DNS Change



    Confidential
Questions?
Marc Gaffan
Co-Founder, VP Marketing
marc@incapsula.com


    Confidential

Incapsula: Boosting Drupal Websites Security