The HAPPY PLUS infrastructure on AWS includes web servers, application servers, and databases (see diagram). Deep Security is deployed on six web servers that are the most susceptible to an outside attack. Since the security of the IDS/IPS is particularly important, it runs in “block mode.”
The IDS/IPS capabilities of Deep Security can be deployed either in “detect mode” or “block mode.” In detect mode, malicious content is allowed to pass through, and an alert is sent to administrators. Shueisha chose to deploy in block mode, which blocks malicious traffic in addition to generating an alert. “Detect mode is useful if you have services like payment processing or communication, where interruptions could be very costly. But since HAPPY PLUS traffic doesn’t include that kind of service, we use block mode to optimize security,” says Yokota.
Trend Micro took the unique characteristics of HAPPY PLUS into account and provided support to optimize the settings of Deep Security for the environment. “Although we frequently meet with our integrators, software vendors tend to remain at a distance. However, Trend Micro visits us frequently and responds attentively to even our most detailed questions. This support has given us a great sense of security,” says Yokota.
After using Deep Security to create a safe and secure operating environment on AWS, Shueisha now enjoys the cloud’s benefits, including a reduction of costs and operational workload, as well as the resource elasticity of Amazon’s “Auto Scaling” feature. In the future, the company plans to expand its service platform as the number of HAPPY PLUS members increases.
“Using the web and the cloud will become significant keys for Shueisha’s business. Security countermeasures are essential to allow our customers to use our services with peace of mind. We expect Trend Micro to continue providing us with the optimal proposals and solutions,” says Yokota.