Cisco Cisco Web Security Appliance S360 White Paper

Page of 6
 
 
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. 
Page 1 of 6 
White Paper 
Cisco Web Security 
 
Web technology provides innovative ways to market products, reach customers and 
suppliers, and reduce the cost of doing business. Unfortunately, many of these 
technologies contain security threats that can expose companies to significant 
business risks. 
More Exposure, New Threats 
Today, some of the most sophisticated web-based threats are designed to hide in plain sight on legitimate and 
well-trafficked websites. 
● 
Online advertisements are now 182 times more likely to deliver malicious content than pornographic sites
1
● 
Studies of traffic patterns show that criminal activity mirrors the “9 to 5” workday of its victims. 
● 
The majority (83%) of web malware encounters in 2012 were malicious scripts and hidden iFrames - attacks 
representing mali
cious code on “trusted” webpages that users visit every day
2
Ubiquitous web access creates new network entry points that blur the lines of historically segmented security 
layers. Employees once checked text-based email from workstations behind company firewalls, but today they 
interact with rich HTML messages from multiple devices, anytime and anywhere. Sophisticated blended email and 
web attacks capitalize on this vulnerability. 
Once an organization’s network is compromised, it can take weeks, months, or longer for an advanced persistent 
threat (APT) enabled through web malware to be detected in the network. Meanwhile, the targeted organization 
continues to lose data - and risks significant financial and reputation damage. 
                                                 
1
 2013 Cisco Annual Security Report, January 2013, available for download at 
. 
2
 2013 Cisco Annual Security Report, January 2013, available for download at 
.