Signal Sciences Case Studies Scaling Attack Detections with Immediate Impact: Vimeo's IoT Journey

	Scaling Attack Detections with Immediate Impact: Vimeo's IoT Journey Signal Sciences

Scaling Attack Detections with Immediate Impact: Vimeo's IoT Journey

Signal Sciences

Technology Category	Cybersecurity & Privacy - Application Security Cybersecurity & Privacy - Intrusion Detection
Applicable Industries	Cement National Security & Defense
Applicable Functions	Maintenance
Use Cases	Supply Chain Visibility Tamper Detection
Services	Testing & Certification
Challenge	Vimeo, a leading professional video platform with over 150 million users globally, was facing a challenge in terms of visibility into production traffic and new merger and acquisition activity. The company's rapid scaling and recent acquisitions necessitated a robust application security program to prevent prevalent attacks like XSS, SQLi, API abuse, and account takeover. Additionally, Vimeo required a solution that would seamlessly integrate with their newly built AWS infrastructure without the need for extensive tooling and upkeep. The company also wanted all requirements to be consolidated under a single vendor for ease of use across multiple teams. Read More
About Customer	Vimeo is the world’s leading professional video platform, providing powerful tools for hosting, sharing, and streaming high-definition video. With over 150 million users globally and a number of recent acquisitions, Vimeo is scaling fast but remains highly focused on ensuring the creators and viewers have a seamless experience on their site. To support the company’s recent growth, the Vimeo team knew they had to strengthen their current application security program. Read More
Customer Name	Vimeo Read More
Solution	Vimeo implemented Signal Sciences for its comprehensive detection and blocking capabilities, ease of use, minimal configuration and maintenance, and extensive visibility into attacks on their applications. Within 30 days, Vimeo was able to install, test, and deploy the solution in production across all of a new acquisition's infrastructure. The solution provided immediate time-to-value across different functions and teams, including Engineering, SRE, Dev, and Security. The 'out of the box' configuration not only improved general visibility but also stopped a lot of bogus traffic from hitting their resources. Unlike other Layer-7 approaches to security, Signal Sciences' next-generation WAF required no rules or ongoing maintenance to stop OWASP Top 10 attacks. Read More Log in to view content
Contents

Technology Category

Cybersecurity & Privacy - Application Security

Cybersecurity & Privacy - Intrusion Detection

Applicable Industries

Cement

National Security & Defense

Applicable Functions

Maintenance

Use Cases

Supply Chain Visibility

Tamper Detection

Services

Testing & Certification

Challenge

Vimeo, a leading professional video platform with over 150 million users globally, was facing a challenge in terms of visibility into production traffic and new merger and acquisition activity. The company's rapid scaling and recent acquisitions necessitated a robust application security program to prevent prevalent attacks like XSS, SQLi, API abuse, and account takeover. Additionally, Vimeo required a solution that would seamlessly integrate with their newly built AWS infrastructure without the need for extensive tooling and upkeep. The company also wanted all requirements to be consolidated under a single vendor for ease of use across multiple teams.

About Customer

Vimeo is the world’s leading professional video platform, providing powerful tools for hosting, sharing, and streaming high-definition video. With over 150 million users globally and a number of recent acquisitions, Vimeo is scaling fast but remains highly focused on ensuring the creators and viewers have a seamless experience on their site. To support the company’s recent growth, the Vimeo team knew they had to strengthen their current application security program.

Customer Name

Vimeo

Solution

Vimeo implemented Signal Sciences for its comprehensive detection and blocking capabilities, ease of use, minimal configuration and maintenance, and extensive visibility into attacks on their applications. Within 30 days, Vimeo was able to install, test, and deploy the solution in production across all of a new acquisition's infrastructure. The solution provided immediate time-to-value across different functions and teams, including Engineering, SRE, Dev, and Security. The 'out of the box' configuration not only improved general visibility but also stopped a lot of bogus traffic from hitting their resources. Unlike other Layer-7 approaches to security, Signal Sciences' next-generation WAF required no rules or ongoing maintenance to stop OWASP Top 10 attacks.

Impact #1	The implementation of Signal Sciences resulted in low operational expenses for Vimeo. The solution saved the company hours of tuning and testing that is traditionally required with more legacy approaches to web application firewalls. With nearly non-existent operational expenses resulting in lower resource utilization, Vimeo was able to direct manpower towards more critical tasks. The company also gained better visibility into their traffic signals and more dedicated resources, enabling them to take on security projects with the data and automation Signal Sciences provided. In one unique use case, Vimeo implemented a callback to automatically roll back user accounts flagged for suspicious behavior, allowing them to scale their user protections while complementing other in-house tooling for the safest and best user experience.

Impact #1

The implementation of Signal Sciences resulted in low operational expenses for Vimeo. The solution saved the company hours of tuning and testing that is traditionally required with more legacy approaches to web application firewalls. With nearly non-existent operational expenses resulting in lower resource utilization, Vimeo was able to direct manpower towards more critical tasks. The company also gained better visibility into their traffic signals and more dedicated resources, enabling them to take on security projects with the data and automation Signal Sciences provided. In one unique use case, Vimeo implemented a callback to automatically roll back user accounts flagged for suspicious behavior, allowing them to scale their user protections while complementing other in-house tooling for the safest and best user experience.

Benefit #1	Immediate time-to-value across different functions and teams
Benefit #2	Installation, testing, and deployment in production across all of a new acquisition's infrastructure within 30 days
Benefit #3	Significant reduction in bogus traffic hitting Vimeo's resources

Benefit #1

Immediate time-to-value across different functions and teams

Benefit #2

Installation, testing, and deployment in production across all of a new acquisition's infrastructure within 30 days

Benefit #3

Significant reduction in bogus traffic hitting Vimeo's resources

Download PDF Version

Overview

Scaling Attack Detections with Immediate Impact: Vimeo's IoT Journey

Operational Impact

Quantitative Benefit