Cloud SaaS company has high stack revenue. It's reviewed current SaaS company status at the 70% growth. And it found security SaaS company were still need costly.

1. Cloud Computing
SaaS Security

2. Charlie Chaeho Lim, Ph.D
CERT-KR, KIST/SERI
CERTCC-KR, KISA
Visiting Professor, KAIST
Security Manager, Naver/NHN
Research, Bit-Scan
Publish Security Books, Journal
Penetration Test, Bank, Company
Author

3. 1. Abstracts
2. Cloud Computing
3. SaaS Stock Statistics
4. Cloud Security SaaS
5. SaaS Security Requirement
6. BitScan’s Provision
7. Conclusion
Contents

4. Leveraging the AWS platform, we’ve
been able to seamlessly scale our
infrastructure, better serve our
customers across the globe, and reduce
our fixed costs by 75% and operational
costs by 83%.
- Valentino Volonghi
Cloud Computing
https://aws.amazon.com/ko/solutions/case-studies/adroll-tco/

5. 1. Cost Savings
2. Security
3. Flexibility
4. Mobility
5. Insight
6. Increased Collaboration
7. Quality Control
8. Disaster Recovery
9. Loss Prevention
10. Automatic Software Updates
11. Competitive Edge
12. Sustainability
Cloud Computing
https://www.salesforce.com/products/platform/best-practices/benefits-of-cloud-computing/
12 Benefits of Cloud Computing

6. SaaS Stock Statistics
https://www.scnsoft.com/blog/saas-development-guide
• No troubles with installation on users’ part
• Easy releases and maintenance
• Easy scalability
• ‘How-to’s of SaaS Development
SaaS vs. On-premises

7. SaaS Stock Statistics
https://newacademyoffinance.com/saas-stocks-part-1
Top 20 SaaS Stocks: Which are those with
strong Gross Margins and Revenue Growth?
• Gross Margins 70%.
• Grow Revenue 20%.

8. Cloud Security SaaS
https://newacademyoffinance.com/saas-stocks-part-1
https://www.zscaler.com/
Zscaler, Inc. operates as a cloud security company worldwide. The
company offers Zscaler Internet Access solutions that connect users to
externally managed applications, including software-as-a-service
applications and Internet destinations; and Zscaler Private Access
solution, which is designed to provide access to internally managed
applications, either hosted internally in data centers and private or
public clouds. One of their core products is their Zscaler Private
Access, ZPA, and this allows users to securely access corporate apps
without network access, so through the cloud. And ZPA was a driver
behind the company’s last earnings report. The report highlighted that
Zscaler’s ZPA usage grew 10 times since the last quarter. One could
infer that this is due, in part, to the work-from-home wave. The
company’s emphasis on mobile devices makes Zscaler uniquely suited
to securely provide remote access to employees working from home.
The company is expected to report quarterly results next Wednesday
on 9 Sep. Guidance for the fiscal fourth-quarter calls for revenue of
$117 million to $119 million, representing 37% growth at the
midpoint compared to last year. On a full-year basis, revenue is
expected to grow by 40% YoY. The company sports a gross margin of
79%.
79%

9. Cloud Security SaaS
https://www.zscaler.com/
Security Transformation
Cloud Security
Secure Web Gateways
Advanced Threat Protection
Data Protection and Compliance Assurance
Machine Learning Security
Guest Wi-Fi Protection
App Transformation
Zero Trust Network Access
Remote Access VPN Alternative
Zero Trust On-Premises
M&A and Divestitures
Secure Cloud Migration
Secure Third-party Access

10. SaaS Security Requirement
No Guarantee of Persistent Major Security
1. No Change of Web Apps Security Status 82%
2. IBM’s Data Breach Report
3. Cloud misconfiguration, Software and Phishing
4. Need cost and performance
5. Much more security staff
6. Google Web apps scans 4 vulnerabilities
1. https://insights.sei.cmu.edu/sei_blog/2018/07/10-types-of-application-security-testing-tools-when-and-how-to-use-them.html
2. Cost of a Data Breach Report https://www.ibm.com/security/data-breach

11. SaaS Security Requirement
1. Cost of a Data Breach Report https://www.ibm.com/security/data-breach
2. https://us-cert.cisa.gov/ncas/current-activity/2020/01/24/nsa-releases-guidance-mitigating-cloud-vulnerabilities
Software

12. SaaS Security Requirement

13. BitScan’s Provision
• Bit-Scanner defines 30 web application attack
signature and detect vulnerability TCP HTTP.
• 30 vulnerabilities defined and simulated after
Crawling phase.
• Pre Crime Detect Satellite(PCDS) crawls 48/day in
6M web severs and keeps 200,000 black lists.
1. http://journalhome.ap-northeast-2.elasticbeanstalk.com/journals/jkiisc/digital-library/23308

14. BitScan’s Provision
• PCDS, Pre Crime Detection Satellite Crawls and
Analyzes Malicious Web URL(URI).
• PCDS Crawls 48 times a day 6M target web severs
and analyzes by automatic regex analyze.
• 200,000 Malicious URL(URL).
• Just local use 99%.
• Google Safe Browsing is not active.
• Used global if target Web Server.
1. https://transparencyreport.google.com/safe-
browsing/overview?unsafe=dataset:1;series:malwareDetected,phishingDetected;start:1148194800000;end:1597561200000&lu=unsafe

15. Conclusion
 Web Apps Security
• 100% vulnerability Guarantee
• 1/10 Security staff
 Phishing/APT Security
• 99% Black list
• 48 time crawl and regex analyzing
https://www.researchgate.net/figure/Cost-benefit-relationships-in-information-security-From-Boehme-2010_fig1_318311904