Jump to content

Sanctum (company)

From Wikipedia, the free encyclopedia
Sanctum
Company typePrivate Company
IndustrySoftware,
Information Technology
PredecessorPerfecto Technologies
Founded1997
FounderGili Raanan and Eran Reshef
Defunct2006
FateAcquired
SuccessorIBM
HeadquartersHerzliya, Israel,
ProductsAppShield and AppScan
Websitewww.IBM.com

Sanctum was a Santa Clara, California-based information technology company focused on application security. Sanctum offered a firewall, AppShield, and scanner, AppScan, for application-layer security for Web environments.[1]

In 2003 Sanctum was merged with Watchfire and the company was subsequently acquired by IBM.[2]

History

[edit]

Sanctum was founded in 1997 as Perfecto Technologies, by Eran Reshef and Gili Raanan.

The company released its first product AppShield in summer of 1999.[3]

The company has done an extensive research in application security and applying formal methods to real life software[4] in collaboration with Turing Award winner Professor Amir Penueli. Early research in 1996 and 1997 led to the invention, in parallel to other teams, of CAPTCHA technology, and the application for a US patent for CAPTCHA.[5]

In 2000 the company renamed itself to Sanctum.[6] The company was backed by investors Sequoia Capital, Intel Capital, Goldman Sachs, DLJ, Walden and Mofet.[7]

Products

[edit]

The AppShield product was the first product to inspect incoming Hypertext Transfer Protocol requests and block malicious attacks based on a dynamic policy which was composed by analyzing the outgoing HTML pages.[8][9]

Later in June 2000 the company introduced AppScan the world's first Web Security Vulnerability Assessment solution.[10] Among the first clients for AppScan were Yahoo!,[11] Bank of America and AT&T.[12]

References

[edit]
  1. ^ "What the Watchfire-Sanctum acquisition means for Web app security". Retrieved 2016-09-12.
  2. ^ "IBM Buys Watchfire". PCWorld. 2007-06-06. Retrieved 2016-09-12.
  3. ^ Messmer, Ellen. "CNN - New tool blocks wily e-comm hacker tricks - September 7, 1999". edition.cnn.com. Retrieved 2016-09-12.
  4. ^ Kesten, Yonit; Klein, Amit; Pnueli, Amir; Raanan, Gil (1999-09-20). Wing, Jeannette M.; Woodcock, Jim; Davies, Jim (eds.). FM'99 — Formal Methods. Lecture Notes in Computer Science. Springer Berlin Heidelberg. pp. 173–194. doi:10.1007/3-540-48119-2_12. ISBN 9783540665878. S2CID 41193257.
  5. ^ US20050114705A1, Reshef, Eran; Raanan, Gil & Solan, Eilon, "Method and system for discriminating a human action from a computerized action", issued 2005-05-26 
  6. ^ "Perfecto Changes Name to Sanctum - Globes English". Globes. 21 June 2000. Retrieved 2016-09-12.
  7. ^ "DLJ'S Sprout Group Leads $16 Million Investment in Perfecto Technologies; Premier Venture Firm Backs eBusiness Security Software Company. - Free Online Library". www.thefreelibrary.com. Retrieved 2016-09-12.
  8. ^ US6311278B1, Raanan, Gil; Moran, Tal & Galant, Yoron et al., "Method and system for extracting application protocol characteristics", issued 2001-10-30 
  9. ^ US20030226038A1, Raanan, Gil & Linhart, Chaim, "Method and system for dynamic refinement of security policies", issued 2003-12-04 
  10. ^ "Sanctum Introduces AppScan: Industry's First Automated Web Application Security Audit Tool. - Free Online Library". www.thefreelibrary.com. Retrieved 2016-09-12.
  11. ^ Network World. IDG Network World Inc. 2000-06-19.
  12. ^ "Sanctum, Inc. cited as leader in key web security sector". 5 August 2002. Retrieved 2016-09-12.