Toshiro Ohwada, CEOFailing to address the challenges posed by cyber threats can shatter the integrity and trust businesses have worked hard to build.
This situation necessitates organizations to stay vigilant, adapt their cybersecurity strategies to the evolving threat landscape, and invest in robust defense mechanisms.
That’s where Belue Creative makes a difference. The professional information security company provides high-quality products and services to help businesses, universities, and government agencies avoid cyber threats. It is passionate about raising awareness and demand for cyber security in Asia, and also providing cyber security support in important infrastructure sectors such as aviation and finance in Bangladesh.
Through assessments and security audits, it detects potential vulnerabilities in client IT environments and systems and proposes measures to achieve a robust security posture.
“Our responsive and proactive team engages in the diagnostic and auditing processes, enabling us to deliver prompt and cost-effective services to clients,” says Toshiro Ohwada, CEO, Belue Creative.
Safeguarding Systems and Strengthening Resilience
A two-pronged technical and managerial approach is offered to support the information security needs of organizations.
On the technical front, it provides secure package management (SPM), a diagnostic tool that visualizes vulnerabilities in packages installed on servers. The solution refers to publicly available databases and other sources to collect information. Vulnerability information gets updated daily, and approximately 20,000 vulnerabilities are disclosed annually.
SPM enables the investigation of each individual package’s attack potential. Apart from the vulnerabilities inherent in the package, its operation status as a process and network service can also be visualized. This allows users to prioritize the remediation for every package.
The diagnostic tool executes commands in the system OS and collects package version information without modifying or deleting configuration files or installing special tools. SPM has the capability to inspect the system environment while keeping it clean. Inspection can be performed without affecting the system in operation. There is no need to build a server for analysis or temporarily disarm the firewall.
“SPM minimizes the burden on the customer as inspections can be performed by simply executing the information collection script on the server,” says Ohwada.
Enabling Extremely Accurate Vulnerability Testing
Recently, Belue Creative has launched SPMv2.0, the world’s first domestically produced cyber security solution. It is a vulnerability management and inspection solution that inspects systems and servers exposed to increasingly sophisticated and complex cyber attacks for vulnerabilities (security issues) with extremely high accuracy. SPMv2.0 uses a vulnerability collection engine to collect new vulnerabilities discovered daily from various sites around the world, and creates and updates its own vulnerability information database. This vulnerability information and client system information enables extremely accurate vulnerability testing.
The inspection also reduces the customer’s workload and server load by more than 60 percent. Furthermore, the system prioritizes countermeasures for detected vulnerabilities by scoring the severity of the target server’s information assets, network connection environment, and potential for exploitation. Server administrators can use the scheduling function to keep abreast of the latest vulnerabilities in their systems/servers via email alerts.
SPM 2.0’s new feature helps determine risks based on the actual environment, considering the value of the system’s information assets and the possibility of reaching the system via the network.
“In addition to the conventional risk assessment based on the Common Vulnerability Scoring System, we are currently implementing a risk visualization function that takes into account the operating status of processes in the system and the degree of exposure to the network,” says Ohwada.
Our responsive and proactive team engages in the diagnostic and auditing processes, enabling us to deliver prompt and cost-effective services to clients.
Determining Risks Quickly and Efficiently
To facilitate transparency of its services, Belue Creative organizes its offerings based on the OSI reference model’s hierarchical structure. This enables clients to visualize the contents of the diagnostic services, ranging from the infrastructure layer (cloud and OS) to middleware and web/smartphone applications.
The service process includes target determination, diagnostic work and verification, and result reporting. During target selection, Belue Creative collaborates closely with the client to determine the server IP address, URL, and application for diagnosis. It then runs diagnostic tests to identify a broad range of vulnerabilities meticulously examined by its engineers.
This phase involves port scans, HTTP attack requests, exploit code verification, and application analysis conducted by skilled professionals referred to as ’white-hat hackers.’ Belue Creative immediately informs the client to ensure quick mitigation if high-risk vulnerabilities are detected.
Partnering for Customer Success
The inspection also reduces the customer’s workload and server load by more than 60 percent. Furthermore, the system prioritizes countermeasures for detected vulnerabilities by scoring the severity of the target server’s information assets, network connection environment, and potential for exploitation. Server administrators can use the scheduling function to keep abreast of the latest vulnerabilities in their systems/servers via email alerts.
SPM 2.0’s new feature helps determine risks based on the actual environment, considering the value of the system’s information assets and the possibility of reaching the system via the network.
“In addition to the conventional risk assessment based on the Common Vulnerability Scoring System, we are currently implementing a risk visualization function that takes into account the operating status of processes in the system and the degree of exposure to the network,” says Ohwada.
On the management front, Belue Creative’s consulting services support internal regulations and employee training. It assists clients in creating resilient structures and formulating rules to prevent incidents resulting from unauthorized information removal or employee accidents. It excels in customizing services for each client, assisting them in comprehending inherent risks and providing tailored solutions.
Determining Risks Quickly and Efficiently
To facilitate transparency of its services, Belue Creative organizes its offerings based on the OSI reference model’s hierarchical structure. This enables clients to visualize the contents of the diagnostic services, ranging from the infrastructure layer (cloud and OS) to middleware and web/smartphone applications.
The service process includes target determination, diagnostic work and verification, and result reporting. During target selection, Belue Creative collaborates closely with the client to determine the server IP address, URL, and application for diagnosis. It then runs diagnostic tests to identify a broad range of vulnerabilities meticulously examined by its engineers.
This phase involves port scans, HTTP attack requests, exploit code verification, and application analysis conducted by skilled professionals referred to as ’white-hat hackers.’ Belue Creative immediately informs the client to ensure quick mitigation if high-risk vulnerabilities are detected.
Partnering for Customer Success
Belue Creative operates on three fundamental principles—customer, company, and society. Since information security needs vary across industries and organizations, clients may not possess a comprehensive understanding of the associated risks and countermeasures. The company enables organizations to safeguard their reputation, intellectual property, and operational continuity.
“Following the same principles, we actively participate in the Ministry of Economy, Trade and Industry’s IoT device inspection project, contributing to the safety of distributed IoT devices and ensuring customers can use and sell them with confidence,” says Ohwada.
Belue Creative references security guidelines like NIST to ensure comprehensive coverage. In line with evolving trends like connected cars, it emphasizes securing the connection points between cyberspace and physical space, aligning with the requirements. Its knowledge base spans various technologies, such as Cloud (AWS, Azure), smartphone applications (iOS, Android), and operating systems (Linux, Windows).
“We provide advisory support for meeting guideline requirements during actual system implementation,” says Ohwada.
Securing Remote Work and Beyond
The biggest differentiator for Belue Creative is its capability to adapt to the ever-evolving market requirements and architect effective solutions.
-
With our expertise, commitment to customization, and focus on innovation, we are a trusted partner for organizations seeking robust information security measures.
In parallel, it is supporting the digitalization of society and infrastructure, which is strongly encouraged in Japan. The Society 5.0 and Utility 3.0 objectives are a testament to this—creating synergy between cyber and physical space. The company is well-prepared to stay at the forefront of this change and drive more clients toward success.
Empowering Organizations with Proactive Information Security Solutions
The concept of vulnerability assessment is often misinterpreted by businesses. They consider this a final checkbox before system releases or updates, which can have a significant security impact on a brand.
Belue Creative is the go-to partner in this regard. It allows clients to release their systems to the public with confidence. It has worked with many clients, helping them report critical vulnerabilities in pre-release systems and preventing unauthorized intrusions.
A proprietary SPM service embodies Belue Creative’s dedication to making systems more manageable and secure. These solutions are the cornerstone of its diagnostic and auditing services. Its commitment to leveraging technology to provide efficient, high-quality, and cost-effective services demonstrates its unwavering focus on customer satisfaction.
“As our society continues to evolve digitally, we remain at the forefront, providing comprehensive security solutions to businesses across various sectors,” says Ohwada. “With our expertise, commitment to customization, and focus on innovation, we are a trusted partner for organizations seeking robust information security measures.”
