Technology Sectors

Market Sectors

Xceedium’s Glenn Hazard pays a friendly visit to GSN

Glenn Hazard

Glenn Hazard, a hard-charging CEO who has experienced success in growing and selling off software and information technology companies in the past, has taken on a new challenge: spearheading the expansion of Xceedium, a small IT security company currently based in Jersey City, NJ, for which Hazard sees a big future.

Hazard believes that Xceedium is ideally positioned to take advantage of what he envisions as the next wave in the never-ending effort to safeguard government and corporate computer networks.

Where “protecting the perimeter” used to be the mantra among IT security firms -- and the customers they aimed to protect -- that concept of “keeping the bad guys out” is no longer quite as fashionable. Today, the IT security world seems to recognize that threats can come from outside the network, from inside the network, and even from your own most trusted employees.

That’s why Xceedium has developed a new paradigm for IT security, which promises to protect a network from any threat, from any source, at any time. Hazard employs a user-friendly analogy to illustrate Xceedium’s basic philosophy:

Suppose Glenn Hazard lived in a gated community and you wanted to pay him a visit. In the “old days,” you might have driven up to the gatehouse, presented your driver’s license (proving you were who you claimed to be) and waited for the guard to phone Glenn, get his permission to let you into the community, and then waved you through the gate. That was all the protection Glenn was offered. Once you got past the gatehouse, you were free to roam around the community at will, visit any street, knock on any door, and enter any home whose door happened to be unlocked.

That’s not how Xceedium sees network security, Hazard told me when he visited GSN’s offices in New York City on July 16. His company operates on what he calls a “Zero Trust Model,” in which nobody is trusted to be 100 percent innocent, and everyone is monitored on a continuous basis.

If Xceedium were safeguarding the same gated community, you might drive up to the security gatehouse and present your driver’s license. The guard would check your credentials and then ask you to park your car in a nearby parking area and hop in the guard’s car, so the guard could drive you to Glenn’s house. Once there, the guard would ring the doorbell, verify that Glenn was willing to meet with you, and sit in his car immediately outside Glenn’s front door until your conversation was completed. You would then get back into the guard’s car, be driven back to your car, and watched closely as you left the property.

“The whole time you were in the gated community, you would be chaperoned,” explained Hazard. “You would only see what we have allowed you to see.”

Xceedium takes the same approach to protecting a computer network: External or internal visitors are authenticated, they are accompanied during their entire stay in the network, every move is monitored and logged, and their entire visit is audited after-the-fact, Hazard explained.

You are not free to roam about the network because you don’t get to keep your own IP address. “You have a zero footprint inside the network,” Hazard added, explaining that a visitor’s movements are restricted by Xceedium with the help of “encrypted reverse tunneling” technology.

Xceedium has distilled its philosophy into a software-driven appliance which has pulled together several different complimentary technical approaches in a more sophisticated way than Hazard has seen anywhere else. “I can’t find anyone else who has done all of this in a single appliance,” he proudly declares.

The heightened interest in cloud computing -- and the push from all sides for governments and businesses to collaborate externally and internally with a wide range of partners -- has coalesced into a strong need for an all-encompassing approach to security that augments “perimeter security,” without trying to replace it. That’s precisely where Hazard thinks Xceedium has positioned itself.

In the very near future, Hazard is likely to play an even more prominent role at the company, and he’ll soon be unveiling a federal advisory board of governmental and corporate IT security veterans.

Hazard has been right in the past. If he’s right again, we’ll all be hearing a lot more from Xceedium in the near future.

Editor's Note: A guest column written by Glenn Hazard was published on GSN's Web site on July 16.

 

Recent Videos

It's been a banner year for the Whitestone Group, according to John Clark, CEO of the facility security, asset/force protection and investigations...
Jeff Horne explains that Denver, CO-based Accuvant , Inc has two different businesses – the Value Added Reseller (VAR) side, in which it is one of...
GSN caught up with Dave Natelson for a quick interview at the Cocktail Reception at the 2011 Awards Dinner, before he learned that Nasatka had earned...
Ann Pickren discusses MIR3’s Mass Notification System that was awarded a Winner’s Trophy in GSN’s 2011 Homeland Security Awards Program. She explains...
Former Coast Guard Commandant Thad Allen, who served through a long and distinguished career in the United States Coast Guard and later answered the...

Upcoming Events

Event Details Dates of Event
SANS Monterey 2012 Jan 30 - Feb 4
2012 Adobe Government Assembly Feb 8
SANS Phoenix 2012 Feb 13 - 18
SANS Secure India 2012 Feb 20 - 25
The Airport Law Enforcement Symposium Feb 23-24, 2012 Feb 23 - 24
Physical Security: Introductory Applications and Technology Feb 27 - Mar 1
Conducting Corporate Investigations Feb 27 - 28
ISC CHINA 2012 (International Security Conference & Exposition CHINA) Feb 27 - 29
RSA Conference 2012 Feb 27 - Mar 2
SAP Public Sector Partner Exchange Feb 28 - 28
SANS Secure Singapore 2012 Mar 5 - 17
SANS Germany 2012 Mar 5 - 10
Homeland Security Finance Forum 2012 Mar 6 - 6
Basic Hands-On CAMEO Training Mar 12 - 14
ASIS Assets Protection Course: Principles of Security (APC I) Mar 12 - 15
SANS Mobile Device Security Summit 2012 Mar 12 - 15
Aviation Week's Innovation Challenge Showcase Mar 13 - 14
Symantec Government Technology Summit Mar 20 - 20
STI at SANS 2012 Mar 23 - 30
SANS 2012 Mar 23 - 30
The 9th Two Day Conference On Indian Medical Devices & Plastics Disposables Industry 2012 Mar 23 - 24
SANS Northern Virginia 2012 Apr 15 - 20
Active Shooter Apr 18 - 19
SANS AppSec 2012 Apr 24 - May 2
SANS Cyber Guardian 2012 Apr 30 - May 7
Telework Exchange Spring 2012 Town Hall Meeting May 2 - 2
5th Sample Prep - Sample Preparation for Virus, Toxin, & Pathogen Detection & Identification May 3 - 4
SANS Security West 2012 May 10 - 18
SANS Toronto 2012 May 14 - 19
Counter Terror Expo US May 16 - 17
CEIC 2012 (Computer and Enterprise Investigations Conference) May 21 - 24
SANS Rocky Mountain 2012 Jun 4 - 9
Data Center Brainstorm 2012 Jun 19 - 19
SANS Forensics and Incident Response Summit 2012 Jun 21 - 27
Vanguard Security & Compliance 2012 Jun 25 - 28
SANS Canberra 2012 Jul 2 - 10