How GoStream Handles Dangerous Cyberattacks with Vulnerability Management

Reading Time: 4 minutes

GoStream used CyStack’s service for Vulnerability Management to improve its platform’s endurance against cyber attacks.

Our client

GoStream has been a live broadcasting platform in Vietnam since 2017, connecting businesses and individuals selling online by converting videos into live streaming formats and distributing them on the internet in real-time. GoStream has quickly become a favorite streaming platform in Vietnam and many other countries, attracting more than one million users to date.

With the ability to store and process large amounts of data and systems and applications constantly exposed to the internet, facing cyber threats is inevitable. Recognizing the importance of protecting systems and sensitive data, GoStream is very concerned about security issues. However, with the current staff and resources, the company still cannot meet high security requirements.

On the other hand, to scale the platform, continuous testing and monitoring become essential to manage potential vulnerabilities arising from new upgrades. This is especially important because, with the increase in users joining the platform, GoStream will face a higher risk of security vulnerabilities, thus requiring increased security to deal with threats.

The GoStream application primarily focuses on livestream optimization, automated scheduling across social media platforms and e-commerce marketplaces, as well as the creation of mini-games to increase user engagement and entertainment value.

Solution

GoStream understands the risks in cybersecurity that it is facing. After consultation with CyStack, the platform decided to choose the Vulnerability Management solution to improve its platform’s endurance against cyber attacks.

Implementation time: From March 25, 2021 to March 25, 2022.

CyStack performed a security assessment for GoStream’s application infrastructure based on current standards, including a penetration test. All tests are based on NIST SP 800-115 Technical Guide to Information Security Testing and Assessment, OWASP Testing Guide (v4), and CyStack’s standard framework. Our team of security experts continuously monitored, supervised, and responded to critical threats.

To implement the solution, we support GoStream in launching and managing bug bounty programs in WhiteHub, the 1st and the biggest crowdsourced security platform developed by CyStack in Vietnam. The program aims to identify and address security vulnerabilities in a timely and efficient manner, while also providing a safe and secure environment for ethical hackers to report vulnerabilities. This can help the company improve its security posture and reduce the risk of cyber-attacks and data breaches.

By using this service, GoStream’s web application, admin panels, and APIs are monitored 24/7 for cyber threats.

Result

Through the community-driven security program, the company received a large number of valid reports and identified numerous vulnerabilities across multiple severity levels, with the highest reward reaching VND 5,000,000. Remediation efforts were prioritized for critical risk areas related to access control, authentication, and session management, thereby strengthening the overall security posture and resilience of the system.

Customer Services

CyStack’s internal team promptly reported and advised on fixing security vulnerabilities, especially identified issues of high to very high severity. We focus on resolving the problem as soon as it is discovered and provide detailed recommendations on how to deal with similar vulnerabilities that may appear at other connection points in the system.

Besides, CyStack proactively built a comprehensive strategy to prevent and minimize future risks. By focusing on analyzing and fixing vulnerabilities that may appear at different connection points, we ensured that the system not only achieves a high level of security but also maintains stability. These measures and strategies simultaneously contribute to building a safe, reliable, and quality online environment for users of the GoStream application.

“During the work process, we discovered numerous security flaws, cases of fraud, data theft, and critical API leaks. Therefore, CyStack service is a highly valuable resource for businesses specializing in internet services.”

Mr. Nghiem Tien Vien
Founder & CEO at GoStream JSC

About WhiteHub

WhiteHub is a comprehensive cybersecurity management platform that helps businesses effectively protect digital assets, assess security, manage vulnerabilities, and comply with policies. WhiteHub brings businesses the following benefits:

• Attack Surface Management: WhiteHub automatically and manually detects digital assets, creating a comprehensive system to manage a diverse attack surface, including domains, mobile applications, source code, and third-party applications.
• Security Audit & Assessment: Automated vulnerability scanning, penetration testing performed by trusted partners, and a bug bounty program with the participation of more than 3,000 security experts around the world.
• Vulnerability Management: Vulnerability classification according to CWE and VRT standards, with danger-level evaluation based on the latest CVSS system for a detailed and accurate view of risk.
• Digital Risk Protection: Detection and prevention of data leaks and brand counterfeiting, with automatic processing mechanisms to protect important business information and brand reputation.
• Compliance: Compliance assessments against standards such as ISO 27001, HIPAA, GDPR, and PCI DSS, plus support for security policy enforcement and public publishing of security policies.

For more information, please visit: https://whitehub.net/