- Overview
- Catbird V-Security
- Web Security
- > Pharming
- > Website Defacement
- > DNS Hijacking
- > Web Page Performance
- > DNS Server Monitoring
- > Transaction Server
- > TLD Monitoring
- > Availability Monitoring
- > SSL Monitoring
- > Email Monitoring
- > Vulnerability
- Network Access Control
- Catbird Agents
- Vulnerability Monitoring
- Policy & Compliance
- Reporting
- Architecture
Secure Certificate Monitor
How It Works
To keep your customers' online shopping and banking transactions hacker-proof, the Secure Certificate Monitor compares your SSL certificate to the one being used every 2 minutes, from multiple locations across the Internet.
More specifically, Catbird’s Secure Certificate Monitor is a safeguard against BGP poisoning. There are hundreds, if not thousands, of outer edge routers out on the Internet broadcasting BGP routing information to each other. These BGP records change legitimately all of the time, so they are impossible to monitor directly. A man in the middle exploit is one in which a hacker steals part of the traffic headed to your website by poisoning BGP routes and then exchanges a SSL certificate with your customer. The hacker then sends the traffic on to your site, camouflaging the fact that he has already intervened. Now, the bad guys can see secure traffic in its decrypted form, including confidential information such as account numbers and passwords.
An attack like this is particularly insidious as it usually happens without customer or vendor knowledge. Indeed, it may have already happened to you and is a very difficult scheme to protect against. However, the Catbird SSL monitor can detect such sinister activity. One or more of Catbird’s swarm of agents would follow the poisoned path and detect the hackers exploit by checking the accuracy of the secure certificate being exchanged. An SSL certificate is a unique fingerprint. Catbird's Secure Certificate Monitor essentially picks up this fingerprint from the target and then continually compares the results from all over the world. If someone were to change the BGP routing to send traffic to the wrong target, one or more remote Catbird agents routed to this malicious destination would send the alarm. If there is a mismatch, or the connection is not secured, Catbird immediately alerts you via pager or email.
Secure Certificate Data SheetSecure Certificate Monitor Overview
1800 Green Hills Road, Suite 113
Scotts Valley, CA 95066
708.221.0401 fax