The insurance industry's digital transformation over the last decade brought with it improved customer experiences, operational efficiency, and cost reduction. However, this shift also made it a prime target for cybercriminals aiming to exploit vulnerabilities and gain unauthorized access to sensitive data.
As a key player in reinsurance, Swiss Re manages vast amounts of sensitive client data, necessitating comprehensive cybersecurity measures. Compliance with financial regulations, including FINMA and EU GDPR, is also critical to ensuring data privacy and preventing financial crimes.
Swiss Re is heavily focused on container deployments and automation to maximize its security posture and system uptimes. This innovative approach also creates some security challenges as new technologies can lead to new attack vectors.
Challenges Addressed
Global-Scale File Upload Security
- Challenge: Swiss Re faced challenges with infected file uploads to their web portals, risking the security and compliance of their network.
- Solution: OPSWAT's solution enables scanning files at the network edge, ensuring security without compromising workflow or availability.
Client Personal Data Security
- Challenge: Compliance with FINMA and GDPR requires the utmost security for client personal data.
- Solution: OPSWAT MetaDefender technology meets and/or exceeds regulatory requirements, protecting web applications from malicious uploads.
Automation and Integration
- Challenge: Swiss Re sought a solution that seamlessly integrates with their micro-services architecture.
- Solution: OPSWAT's MetaDefender ICAP Server easily integrates with and secures containerized deployments, aligning with Swiss Re's current and future roadmap.
Key Selection Criteria
- Challenge: Swiss Re prioritized compatibility with their micro-services architecture, seeking a solution adaptable with their Azure/Kubernetes environment.
- Solution: OPSWAT's MetaDefender ICAP Server met these criteria and provided flexibility for future integration points, offering a unified and user-friendly security experience.
Solutions Deployed
Swiss Re implemented OPSWAT MetaDefender ICAP Server on Azure Container Instances, integrating it with an API Gateway. This combination allows the validation and scanning of incoming files, protecting the infrastructure from malicious payloads and data loss.
To secure customer data and business document traffic, Swiss Re utilizes MetaDefender ICAP Server deployed in Azure Container Instances.
Swiss Re is committed to the open-source community and raising the security profile of the entire sector. We are embracing the future, and OPSWAT’s commitment to broad cloud-native support for their products is very complementary to our security vision. The MetaDefender Platform provides Swiss Re with a comprehensive, easy-to-deploy and maintain solution that meets regulatory compliance requirements and eliminates the risk of malware entering the organization.
Raymond BucherDirector/Cloud Architect at Swiss Re.
Results Achieved
- Reduced Response Times: The unified platform enables Swiss Re to monitor and respond to threats efficiently, facilitating quick triage of potential risks.
- Advanced Malware Detection: OPSWAT's Multiscanning technology ensures thorough file scanning for malware with detection rates exceeding 99%, incorporating multiple antivirus engines.
- Efficient Deployment: OPSWAT's MetaDefender ICAP Server integrates seamlessly with various infrastructure components, providing a plug-and-play toolkit that can be deployed in minutes.
The majority of documents we handle contain client personal data. These must all be scanned before reaching the internal network to protect our web applications from malicious file uploads. OPSWAT provides a high quality, easy-to-use, effective solution to secure this traffic.
Raymond BucherDirector/Cloud Architect at Swiss Re.
Overall, Swiss Re has experienced faster deployment, higher performance, and greater scalability, resulting in significant cost savings. They can confidently extend OPSWAT technologies to secure new applications as they expand their footprint, ensuring enterprise-class performance and superior service in handling their web application traffic.
For more information on our malware analysis solutions, click here.
