MOUNTAIN VIEW, US - Based on its recent analysis of the vulnerability research market, Frost & Sullivan recognizes HP with the 2013 Global Frost & Sullivan Company of the Year Award for its HP Security Research Zero Day Initiative (ZDI). In 2012, the HP ZDI program accounted for nearly 25 percent of publicly reported vulnerabilities, ahead of all commercial vulnerability reporting organizations. It also leads in the categories of enhanced customer value, quality research practices and technologies.
As part of the HP Security Research organization, the ZDI program involves the collaboration of leading security researchers and software vendors for the early detection of new vulnerabilities in enterprise software and networking systems. The program rewards independent researchers for responsible and controlled disclosure of discovered vulnerabilities. HP TippingPoint Digital Vaccine Labs (DVLabs) then incorporates this data into its filters to protect customers from unprecedented threats called "zero-day vulnerabilities."
Upon its launch in 2005, the ZDI program challenged the market incumbent before surpassing all other commercial sources in the volume of new vulnerabilities reported by 2009. It continues to raise the bar for vulnerability bounty programs through responsible reporting and participation within the broader security intelligence community. For example, HP regularly promotes the importance of vulnerability research through conferences and contests, such as its Pwn2Own contest, to encourage independent researcher participation.
Vulnerability intelligence provided by HP Security Research enables customers, security vendors and software manufacturers to understand the potential vulnerabilities present in their networks and IT systems. Focusing on vulnerabilities is a more effective way of eliminating a network's security weaknesses since this approach patches the underlying vulnerability, instead of just one of many exploits.
"HP ensures that security vendors and software manufacturers have first access to newly discovered vulnerabilities to fix the issues before hackers exploit them," said Frost & Sullivan Senior Industry Analyst Chris Rodriguez . "This socially conscious business practice fosters goodwill and participation among software vendors, competitors and researchers."
Vulnerability intelligence provided by the HP Security Research ZDI is applied in a number of security applications. The company channels the research through the HP TippingPoint ThreatLinQ security portal, which enables customers to incorporate highly relevant and recent security intelligence into their security tools.
Most importantly, the HP Security Research ZDI provides vulnerability intelligence that is used to enhance the effectiveness of the HP TippingPoint Next-Generation Intrusion Prevention System (NGIPS) and HP TippingPoint Next-Generation Firewall (NGFW). Both solutions are supported by the latest advanced vulnerability research intelligence, and enable customers to detect and protect against the most sophisticated attacks.
"HP's focus on sustainable and responsible research and reporting practices has fostered awareness and participation within the security industry and research community," noted Rodriguez. "This success in increasing the number of vulnerabilities reported has enabled HP Security Research to lead the vulnerability research market for four years in a row."
Each year, Frost & Sullivan presents this award to the company that has demonstrated excellence in terms of growth strategy and implementation. The award recognizes a high degree of innovation with products and technologies, and the resulting leadership in terms of customer value and market penetration.
Frost & Sullivan Best Practices Awards recognize companies in a variety of regional and global markets for demonstrating outstanding achievement and superior performance in areas such as leadership, technological innovation, customer service and strategic product development. Industry analysts compare market participants and measure performance through in-depth interviews, analysis and extensive secondary research to identify best practices in the industry.